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[0001] *mwte. r^^'T-^<D±^m4^h(D±mm^mmir^^h)m 



[0002] j^Hmmw&ffite, 7i??;u.?—#<D±f&&mwk<D'(^hffl(o$i& 

faxh^tcfr&mwirz>&ffixhz> 0 

[0003] ^yh±-e<DmTffi%L5\<Dftmk J $>. f^XffSWflJffitt 



[0004] mm. ^(DXo^^>hmmmm^m^m^tc^^m^mm^T^mm 

;g030^^HilIl«WO#*x-^ 

tz^^^hMfe^MniEVft^fe, PKI (Public Key Infrastructure ; ATM^&M) COhtX 

^i/?/vm%&^wmmffi±/mwmmtvxnmttm^te, —m^ mm 
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[0005] ^<D^>bm^mmm &<DMjE&<D±wMmtvx s rv*/i'W4, &m v ^ 

near Linking Protocol) \Z£Z>jj &ftWJCWLlR f Xfi$m&Xtfc2mm o ) 

n n 

(L m> L n ) tfj^WK^w^T* («^tf«f H) fc4**&h*©^ 

rtbtc«t») x j'<>'bw*mmmmio<D^jE&v5±u &&bvxi/xTJ±±fc<Dm 



3ec 



[0006] -^^y^^^^^oVNTtt^^hjl|g^|EMgglOW5E^tiJi-5 

#&nxm2xmfrtix\,^MM(Dy^b<Dttt><9{z, uim&m^zz.kiz.xv, w 
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#4#fr;£fi)U :S. Haber and W. Stornetta, How to Time-Stamp a Digital Document, 
Journal of Cryptology, Vol. 3, No. 2, pp. 99 111, 1991 

##f^^C^2:J.-J. Quisquater, H. Massias, J.S. Avila, B. Preneel, B. Van Rompay: 
Specification and implementation of a timestamping system, Technical Report of Uni 
versite Catholique de Louvain, 1999,URL: http://www.dice.ucl.ac.be/crypto/TlME 
SEC/TR4.tgzl 

#4#fr:$Cilfc3 : A. Buldas, H. Lipmaa and B. Schoenmakers, Optim 
ally efficient accountable time-stamping, in Proceedings of Public Key Cryptography 
2000 (PKC2000), eds. Y. Zheng and H. Imai, pp.293_305, Springer- Verlag, Janu 
ary 2000 

#4#ff;£ife4:A. Buldas. H. Lipmaa and B. Schoenmakers, Optim 
ally efficient accountable time-stamping, in Proceedings of Public Key Cryptography 
2000 (PKC2000), eds. Y. Zheng and H. Imai, pp.293-305, Springer-Verlag, Janua 
ry 2000 

[0008] L^u^ib, 0&nxm3Rxf#mttm^tm<D*mm%m^^tti^ 
[ooo9] h^~^mm^^2^mmm^^^^hm^mmm^4^h\m^m 
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coon] ^mcomi(Dmm\^ B^^^v^M*#^^i-5-^'-<>-hop#^^J(^v^ 



bi^<>x-^mmmm^b^i^(Dmm^±m^fh^m7^mm^^^x. m 
^^^mm~^mw^mmvtc.m^m^mmm(DmmjM.b^n^miz 

i^^w^(Diz^m^y-vizm^mm^mmmmm<Dm^,mmb^mum 
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^*£Sff i-^M^tf #^*Sff Tfrv-fh. mZM$mW.i)K MfeM^tt^ 

[0012] *mm<Dm2(Dmmfe. m^r^^mm^^-r^^y-^^^^^ 

&frbM&P\'9%XZ>Z.blz.£oX— femfflfflffiZb\zi^<DMffi*&*£f&£ft<Z>^ 

v:m%)*k&^x. m~<Dm.*^%^wt<v^mvmxbtittn^ft<Dmmw. 
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3d m 7*—*tsm m xbtiftmfcMffi*&Tfimm]fcmm*(Dv~-7&&m-tz>: 
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my- Kof "j m m.&— get ^^<D^m^m^ ^r, stj tern i ©hew *<e>:e ^ 
[0013] ^b^^^so-ws^, Bf^^^v^Mt ^^j&^^^HDBt^ijt;!:^ 
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wo m xhfrt^mm&Mi&*Rxfm^^ 



coon] *&m<nM4<Dmm*. m^T^zMH m^^-r^-<>h<7)m^mz^^ 
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mmmi^mm^M^mmm^jkmm^m^ extern 

mmmm^m.^m^mmm^mmx^^^thtcmmmmmmxh^ 
mm m%miRirz>m 1 <om&m mm mm^wt t , m teniae m^(d^<d 
/-kctlt, mmin^mmmwm^&xmtRZfttz&mmwm^ 

eseu ttj I am 1 tfWJ m&mm (D^nmn tmmm 1 <£> ke^ 
[0015] jfc&ywMscom&fe* ±mvtz.4^^h\mpfmwjjfe<D&^yy p &mtzmw% 
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[0016] &mm<z>m6<DWMti. ±mLtc4^bm^mm^^m<D^T^^mm^. 



^tf^l^fiE0^#^^«|iE0J»^^i, StjfB^l(DfiE§g*^mjfSfiJffi# 

^(Diz^m^y-bizmi-^m^mmmi(DMmm(Dm^mmb^:mu m 
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sffl mm m^^^m mm *ffr&#© t > mmmm^^m mm wzmzm. 
&m^mm-tz>^mmmmxkit^&t, mw&wmmmmmm^ mm 
m^mm^wm^mi<Dmmm(Dm^\mn(D^^mir^m^.\nnm^iB 

tf 5» ffl^tf m¥$L^Wcb , hu f l ^>IIE^ »<t> ffj f a« M^tt itu 

m mm^mmfrb. mzm i omm mRxim mm&^mm&s &m mm i <r> 

mmmm^m^x^xm^titz^mmmm^^^y-w^i^t. 

^(D^m^m^^x, mmmi<DmmW(DjEmvk$:^u mmwn(vmmw<7y 
mmm^(D^u^mtmmmi^^mmmmn^mz.x<>xm^^tz^^. 

m mm m<o &^(D^nmn(D m & m&zmm -rzn i <r>mm 

mmmi(ommmM^mtmmmm^mmir^mmmm^mm^y^ 
i <Dmm m^mmm^m^m^mmmm mm tmm -t^^mnrnMrnm * 
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[0018] *^m(Dns<D\nm\*. m-^^^jvmn^^-r^^oh^m^n^^ 
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m mm 1 Rxfm2(Dmm ^mm^mmM^mm 1 oto^n 1-5^^ 
u m mm 1 vmrnmrn ^mm^mMM^mm m*2^mt -r^mmm^m^ 

bj^ % &x*h&bmm£fctcmxm$:m2<Dmwmtirz>b, mmmi(ommm^m 

mmmi(Dmmm(Dmmm2(Dtmm(DmnM(Dmm^^n^mmm^n 
, mmm2(Dmmm\^t.n^y-V(Dmmmb. mmmi<Dmmm^xfmmmm 

mmzffixh&^b&mwir&Wim^^y^b. ^m^^mmmiRnm2<Dmm 
m^mzmixttm2mm#mm^iair&mfcu&mit^ys*b 

[0019] ^mm^m^mmn. mfe<D^i?*/i^m&£j&irz^>h<D&&m\z&\,^ 

nomi^m2(Dmm^mmb.^mm^m^b(Dmm(Dmmmm^^xm 
mourn m^^rt^^vmm^m mm.b Kmim *v w—^^xm k Km 
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^w:^v—^a2(Dmmmm^mTvtzmAx&^mmv~^ai(Dmmm^m 
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mm mm \zmm -tzmm ^Mmm ^mt, mm-f^nnm mm mm>bwn&n 
m<Dmm^m^ftir%mm&<Dmmwz^imi-%mmm^im^&b, rn^t 

^(Dmmmmm^n-r^m^^im-r^m^^m^t. mm 
mm i (dm m ^mm^h^mn^mm w^^mirzmm m^im^^t . 

#OMfB^2(DfiE0^*O^Ta^^^{-^ftSiI®M^tt#^^ft- ; 5iiM 

femznixnm2<Dmm#mmzmmir%Wim&^it^iys*t. ^tute^ 
[0020] ^mmomicxDiMmt. tm^^hmfrmmfem^vyy^nn-tzmm 
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[0021] [Emsi^ ^>bmmmw^TJ*<D®.&zmw-rz>m-e$>z> 0 

[nno]mio(i, ^m<Dmi(Dmm(Dnm^^^hmmjEmiy^^(D^ 
nun] num. ^m<Dmi<D^m(Dmm\^^^>nu^mn^^M^i6^ 

[® 1 5] ei i 5 w: x ^ m(Dm2<Dmm(Dmm \z&&4 ^bm^mm ^ta©^ 
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- if m <r> vmzm ^ -r zmft&m, w -r z> y ^ - ^ — vm -efcSo 

[m2o]H2o^. ^mm<Dm2(DMm<Dmm^^^>h\mf^mm^^^(Dm^ 
[02111212m, ^mm<^m3(DMmmm^^4^^h}mmiEm^^^(D^ 

[EI23] in 23 « m om^mmomn i^^^ohim^mm a<?m^ 

o 

[ni25]ii]25fL ^mm<Dms<Dmm(Dnm^m^^^hm^mm^^'r^(D-(-< 
[026]iEi26{i. m^m^^iu^n^PL, s— ^i^^^^mwm^ 
nii27]iEi27ta N ^>^^/wdii^it^ 

[|1128]ia28«.^>'^y^>'^/V^|II^^7K^«^i-S^^(DT^yXA^P^ 

[IH29]|l!29^ N ^v^y^>^/i^tc|ilM^^^^^1#^^§^fe^|^^i~§[i!'T?fe5 0 
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[®33]|2|33«:. »liE^Ol^-</Wj:0teV^aE/W— KW: % mMM^—^h^^ 
m 34] El 34 fit , #38 0|£4<£>|life(D7£f§ fC^^^O- Wlff SE W WA©^ 
[S35]|H35{i. ^W^I^Ollifc^^tR^S^^JK^iEW^^AtJlffiV^ 

cm 36] ei 36 fit x ^ §g (Dm4(Dmmmm im^^ohmmm ^^m,m-< 
[m37]|gi37«. *&w<Dm4(Dmn(DBM^&%^>hmf¥mmi/xTMz&\, ^ 

[IH39]|I|39te. *^0J^^4O^iig<D^S^#5^^HllfffiEP^^^A^-< 
[IH40]|ll4O{±, *^0Jom4<D^ifecD^^#5^>HllI^|iE0J^^A(D-f-< 
[HI41]|1|41{4. ^^0^O^4O^ffi(D^S{-#^^^HllI^|iEPJ^^A(D^ 

[^43]|343{i,^W0^50^0^^^^^Hl«^iiEP^^^(D^ 

[m44]044{*, *m%(om5(D%Mmm\m^^>YmFfmn^^M^rt 
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xmi^mm^^^^-t^xh^ 

OH 53] 05 3 fi, ^^PJ(O^5(D^ffiO^J^#^^>HlI^liEP^^7"A(D3g0 

[Bi54]iii54{*, ^m^(Dm5(DmiM(o^mA^^^>hmf¥m^y^^^m. 

7v—?-^—bX£>Z> 0 
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•So 
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[|g|69]|2|69{^ &&m<D$&5<DM1&<Dte1&iZ&Z'(^shmfcW&^XTJ*<OM& 



[073]ni73(i, ^m(Dm5(Dmmmm^^^>b\mmiEm^^(Dmm 



[078]Ei78}i, fe6»rflPso)ii^^*^y-7^io^uT, atr^ftjKjraPB© 

JIB&^*<zvP-Mi£#9A^#^^ 

[H79]|I|79te, &5^WPS(DJl^^*'^y-7<^lo^bT, HtJ^&JPflPitf) 

/v- Ht<£>f +^?££fft w -fa mx &>z> 0 
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[083]in83«. m§iE^(Du^<^x<om^mm^/— ii^M^— ^fc^vM* 
[m85][H85te, mm&(Du^</i'£i9i&\^mu->^/— ^mWtg^- ^&^fi 

[0022] i£*T. ^0^^^o^S^IH®^fflVNTia0^-rSo 

[0023] <Hl<D^li(g(7>ff0fi> 
( 1 - 1 . 

[0024] ft, ^^WlifflE0^^^AlOO(O^^A«^(»Hfe^l^— T^tLf^O^S 
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[oo25] mxmmm, ^K o ~-?^yh7-?4%ifr\^xwm#mw2i&tf%mmmby* 
* ?>i^f 15 , mwmwi&- fern m ^mnvtcmm^mm. 
[0026] ±*eu-c£5^ 4^Hmm£wm>frM$)m2\^ m^mttitm^^x^^Y 

^J^JII^U— ^ lz.iEMfrbm'9 ^ TSJ^f-LTl ^ 6 
[0027] )i|1^^7tcO#/-K( , J-^^<) ^fJ^^T^^fi^tf^^tt. aT^il 
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[0028] ^TM^Tte, EI5{;i7^1-j;5^ l6m<DV~7%^Z\mikMm*(DM&^ 

fc^Sto/- KfcjtbTtt, ©to3a^©«t»-ejs^pii^icfT*?tt 

^-C\ JB#tffefc)*:<E>w</i^ #^(^^V^^l^)itfV— K£(j, O^U 

[0029] 4\ J«f'J^T : -^^y-K(0 > 5)^#J«9^T^/c^, fip*> % ]lR^*^7Ky-^^ 
#J«9 S T5^^>^{jt/5M0,5)-e£v5£t, -<^^>^{itV(0,5)/^fb/V— MBK= V(4,0 
m$ifrZ>lzn, V(0,5)^V(0,4)S:fed^5ggSL-C, ^^ffihl'£f+|fLU tf/Ns^ 

ffiya>kig^LT^:y^H£(= v(4, o))Srtmti-Htf±v\ ^oj;5^^)iR^a;?)v(o, 

5)t^n£M^i-Z)7?—# (i^TitVCO, 4), V(l,3), V(2,0), V(3,l))a>£>/1 — Mt^ff 
[(V(0, 4), L), (V(l, 3), R), (V(2, 0), L), (V(3, 1), R)] 

[0030] j^bm&mmi¥f&m3tt. me^-r^^mmmmEoay^i^u mm 
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[0031] ^^hSSmE^EOCCy)^^ HiEPJ^Sl^^fefflSbTjoV^c^li^Bt 

[0032] ft, ^^OSSfiEB^^EOCCy)^^^^^^!:^^)!!^^^^^-^^^®* 

5o fllx-tf. m5(cjov>-cfi, /-K(o,5)(^ot, /-K#j^ifiv(2,o) % /— Ksmste 

V (0,4){4gpB#«^7=— ^tf&SiS, /-K#J^ttV (1,3), (3,1)^/- 

K(0, l5)^fij^^tv/cB#^^^«#^tg^MM^x-^-efc^o ^T-e«, MM 
#^^*y~- i ic^j-LT, v(o, 0 <D~b%m<v(\)bW<^bhhZ>o 

[0033] «^-^^#§|515«, ^lJffl^^S2W^±iil!bfcil®M^7 :? -^^^*^feo 

*'J ^ fit) o^-c^iJffl#^®2i^jg^-t-?> ( i:9 i:*otv >§ 0 
[0035] ]ii^^7fc»io(Dy— ^ttc^j-t-?,, tii9^{c{igi-§t>5— o(^y— ^t'^tt 

^CToken(t, t')(*^Oct9 ^tt£*V5 0 
[0036] y— ^t^^Ji|l^:A^*^>^— MC^^-v^tO/W- W^WT*. t<D/\s— 

izmis^— y$xs>Y(Dj— Y(D5t^>j~ Ffrbtez/— v<Dmf&.<Dmus ( 

PathD(t, tl)£U CltL^tl^*5(t§t^*]-r?)mfiE/^i:^o ^O^J^fiJ^ffi(Dt* 
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&#AnUht><£>£authPathDV(t, tl)£U Z.tl&tUZ$3l-fZ>tlz.tti-Z>j&tt%&ffis<x 

[0037] EA±d>fc>, authPathDVd, t')tt, SSfiEW#EOC(y)^^^tLTV^/5^o^tf 
^#>T, MS£-r— *CToken(t, O&fcj^S ±5 fcfcoTV ^5. 

[0038] ft, t'^ t (DM-r^)li^*^J^SBT<D^^^ (Jil^^j^^) ^Tii:4^ 
tt5^<DKB2fe^^SBroy— 7Tfc5i!#fCt>x authPathDVd, OKfctHHifc^j;*: 
SBTfco^T©tt«<WtfS^&h*. CTokenCt, t*)tt, t^T?g^Lfc>f 

[0039] fll&tf, IH7(C*dV^T, CToken(t, t4')«al<D{ifiif$R(0, 3)^<D#JiHi|;v(al)0 
m((0, 3), V(al)) , S.t5a2 0{4S^#(2, Dir^OfiJ^fg V(a2)tf>»((2, 1), V(a2))/^ 
<b^5M((0, 3), V(al)), ((2, 1), V(a2))] tt£Z> 0 

[0040] tlTtlt Sa»EW#tc^*ti^Jii^^^©«^T«^^t>*5rtlcJ:5 

[0041] ^Stt^f«$|314«. KScff #SrJii^*?)7K*^^#bTKS3g«3lCi^fi| 

«t<9pb<«, i^tima^ iii^^^y-^i^ttb^c^s^^ 

©Afrfllfc&V vCte, /— K(0, 5)) (C#LV n*^v ^^tu^ftijoy— ^ (b#k#j 
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[0043] ^m^mmwmmzM. mm%mmi^Mmir%^mmmwtm~xhz>o 

[oo44] mm^mmui, ^yta- ^^yh^—^^xmmmmnsxxf^&mst 

n25z^-tz>nf&xh& 0 
[0045] 4^>-h\m^mm^m^2^ ^mmmwi^Mi^x sir (D^mmm^m 

[0046] $.-t % ^mmwm^'i/?^£ &^tizm&ia*. Wcf^z^Wc** ^n-tz> 
[0047] $.tz. mMmmi^hMmr^^m^ui-^tm^x<oMAE^mE'Lx^ 

xv^-r^zt^tsEir^mi^miEmm^m^ 
[0048] $e>^ wT^ffi^i-^i^^. mmmm^^mtfi m^Amztuzmxh^x 

[0049] &&mn. ^>-t°^~?^yh?~?4Zftvxmwmmite£xfmm#mw2it 
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otv^esMtt, ^utmv. v(3, o)*5«tueva, 4)-e$>5o — mm^mw. 



2i» x ^S^*tt#i:LT, V(0, 5)^t^]III^^M^T : -^T^V(0, 4), V(l, 3), 
*5«fcTJM2, 0)^ffi-^t>0^§ 0 ^Xtt,flJffl#$5il2i*S|feBE^«)5^(gp 
SaSEM»^lff$^(0, 5)OB^£J9^JT-&5^S^(0, 10)<DP&&JEJL|ifc) 

wi:^ pr|6-cfcs©-e, V(l, 3)?riSM4i^-^irLr^Jffl#^g2i^S|iE0j^gi^, 

[0051] ««tC*3V^tt, f'Jffl^g2i^^m$tLfcfiEPJ^^^^$^dii^ 

[0052] rC-C, &&mE<Ott&bftZm&M1fo*<D;—h*m5\Z&\,^X^ (3, 0)) 

t*— ffabsYnxzz^Mzte, mm^<Dv^</^^ti^<Dx\ mftMmxiz. 



[0053] ±m(Dmmz£mm#mmiftfr%^mmww\m^zm2<Dmm%i 
&wzizi&mvxmftirz>ia^ m^mmmm<Dmmm^m^x^tcv— 
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•7 x m^>h^mmwmizMir%mM^T~-7mmmvmxbtitzy--7 
[0054] u±.<D&mmte. ^<th^wmmRummmm^mx.t'^^mmm(c 

PU: Central Processing Unit), -fxi?*? Jx*?*f— $%&^^Wfe&^~fZ>*MA(Ra 
ndom Access Memory)^^^^fBltSe(^!J) , ^-^4^7 (HD) m<DmM. 

eRXJ^m^^nm^M^n , ^Jffl^g2i<7M^VHlll«9!g*§|522, 

^S§P32(D*n ! att, ifBCPU^iS^^Mmtg^fr^J^bfct^M^^ 
V\ £fc, IiEBjaggl(DfBllfl518, flJffl^S2i^fBlt§l325 / S:t) ? ^^e30|fi1g 

[0055] ^mmmm^^u^m^mnir^^^y^n. m^tc^mm^m. 

fV^> 71/^ri/y;Vf^^, CD-ROM, MO, DVD-ROM^ }?<D =^tV — 
[0056] (1-2. i/^TJ*W)W) 

wm^ttvxmi<Dm£&ft?W)ittmjiir%7u~^~bxh<9, miote, mm 
^mm2i^mmMW^n^xm2(D^m%:nmi^mni-^-^>7mxh 

[0057] £-f, Bl8^#BB,LT,^-<VHlRfffE^^^oV^^K-r5o 

[0058] ^iJffl^^i^fiEig^ei^x^^-x-^y ^tffiEPJ^^^If-r^i:, IE 
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m mm i am^imu n&4tLx, wf*y$>v . ^y^tpiE^ ^*^sff -t-sc* 

^X^SIO, S20) o 

SE^ftEOC(y)^{f-t-6(^5/^S30, S40, S50) o 
[0059] rtUCi^ *IJJB#3£fi2if*, ^3ffi|EM»EOC(y)^#i-Sr^dSt?#5 0*Ty7 
S60) o ft, SSlEPJ#EOC(y)^«, ^©^lC*3V>Tli#-e#SfiPI^M^7 ? — 

[0060] mm^Lx, m.&mm3t>&&mmmm&&mmirz>b. mmmmmm^mmi 

£^LT, ^ffiaEPJ^*^{fi-^^^S70, S80) o 

[0061] j^mftmmm&mmtouAK m&mmmB&frbftnztiitzt&m 
tonttLxm^mMzm&m&mmmm&^ttfrTv-7s9o, sioo, sno 

)o 

0)o 

[0063] mm#mw2n^ WLrnvtc^mmm^M-r^mmm^-^m^mmm 

-t"5(^^7°S130, S140) o 

[0064] 7&^x\ mnmm<Dm^-?m%m5te, ^<Dm^xwi%^m^±m^mm. 

#SS2i^mi-S(^^^ 9 S150 ) S160) o 

[0065] ^tnz.x<9. mm#mw2n^ ^m-&mtemmffi^~?%mn-tz>z.t&x% 

§(^^°S170) o 

[0066] ^xj\mjkmm(Dt^(D-^mm()m7kmmmm)fH^\^xi^ ±.&i,tc.mm 
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mmi<DW}mzmrte£ti. imykmrnmrnT-tzt. imikMZtt<D^—hm & 
si9o, S2oo) 0 mmn<nMiE®i$:m!£irz>tz#>. m^mr^ '^m^fo 
[oo67] m8iz^-t4^b)m^mm^m^^^xit, ^^mm^^hmmmmi 

[oo68] m^. m^mm^^h. mTm^mzfLtctemmnzm^^c^^hMFfu 
i><Dxhz> 0 

[oo69] £-f\ mm%mw2m, ^^mmmmi^mmm^tvxmmvtc^^^'^ 

[0070] *3fi*©^^/i^**#UT*^Wl!:^$ttTV^|^— l^^^ra 

<D/V— MttRH£&#U wO/P— HtRH#\ tUfbfe/V— MfiRHcal tC— WrfrZfr 
: Sfr1kf5£tZ>(x s rv7'S320, S330) o 
[0071] AUJKD^iiBc&l^T, ^tec^i"^, $aE^*dS3fe^$tb-CV^«cv>^ 

&$X£*va ^t&mm-tzzt&xtZ) (^^^8350) „ ittjcio, m&m<d 
[0072] fflio&mm^te&b, ^mmz^m^^^ohim^mm^m^mz^^ 
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[0073] m^mmxn, ^^M<Dm^m(DM^t^^mumm<Dmmn^- 
?&mmmm^-m>k-fz> (^^°s4io) 0 ^(D^zmmmm^m^mmiz 



fI$Bll^LT^Jffl#^g2i{C3^Si-5(^7 i 5/7 p S420, S430, S440) o rtb(-J:0, 
^X7°S450, S460) o 



[0074] Si 



z&^^mMmm&^mmi&ifci.x^mirzb^^hmFf 



*w—7<D^x^mvtcz<D^&m&ffimz.^^z^mmwm*mmxbti 



£ tH|t"f 5 (^X5/yS470, S480) o g^V^T, SSEgjfcif ffj6»fe t <b*{a&8fflJ&k 
f+^U ^MmE^^fiJ^ffiAcal^f+^i-^ (^^S490) o — -f-O-HliJ^flE 



tC— ifc-t"5/i^^1tliEi-§(^^ o S500, S510) o 

[0075] ^±<d^be{c*5v^. tkmizf&zb-f- tut, &mmmw&&$As£tix\,^j:\^b 

&£A,£tlX\<^Zb$:mm~rZ>Z.b&X%Z>(*^y7'S530) o ^LT, 4^0H\MPf 

mm2ife, E3E*&*£rSfi 1"5 (^^^S540, S550) o 
[0076] ~*UU;<9, fijffl#3£g2ifi, m^-^^Si^Lfc^ttf^*3V^t>, E^iK 
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3^*b 



[0077] fc*5 % ^y^"S540«)E3EJ|$*O2lfll^BRbTtt, Sfi§gfi3*S^{g Ubtfi^r 

—fifr£tt&ft\zttvx* mm&&mm&&^w%mm$5&&m^x j r iff/I'm 
m<DiE^^mm^m^^mmir^-t^x^x^^ 0 

[0078] (1-3. 

^^x^<omv<mm-r^> 0 

[0079] jSk WT-ef*s P#^JOj^^^bT, -r-<^h)IIff|JE0j!^X^lOO(D-^— ^M*6Nf 



[0080] 



[0081] )II^^^7tcSBT(CljoV^T, lo©7- h*pte^^^)bU^;Vfa(D^WiXM%l&tlZ> 
[0082] m&M1fo* l J— ^-^-i-r»J$tb6JlI^^7KSBTOy-7^1eaf(SBT, i), 1 

^^#J9^TS—iS^a^y~^{^-r-5*a;S7^>'Ktm\ round(SBT, i) 

round(i)<}rfB-t"wi:t)$)-5o 

[0083] mftMffittYZ. &&£iilz]&izofrbte&zm%m-%&tt J 3-U ZJn&m&Mffi 

[0084] #^3i£l3l3*li:*frb-a*, J«^A^^S^-n^JII^:*^J7Ky-7#-^i^#^-$tb 
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= (nl, il), v2 = (n2, i2)(D^(7)|II^^#^:)li^^fflV^T^a-r§o SP*>, v 1 
< v 2ir}i, nl < n2, &fctenl = n2 £>o il < i2 <D^£i:^^i-3o £fc v 1 ^ 

v 2£te, v 1 < v 2*fef4 v 1 = v 2<Z)^£±^i-5 0 v = (n, i) SrtfcKy— 7W. 

wfrtu ^(Dm%\^Mm$K%nnifcmtt ] j—7fthz>t%, m-7& leaK v) 

= leatfn, \)b&to leaKv)^^, U-7vi^^ife^ leaK v )dS£3E/Ht(*>5 
[0085] fc^]III^^^7|cSBT(Dy— ^leaf(SBT ( D^Ol^T, Z.<Dm&M1fafcSBT<Dy 

e(v)ir«-To 

t>^tf)fcKSEi6fli3©SS/SC a 5^n^5 0 rcDfc^cti, T££>5IE^ 

t^U £4T©3oO*#(l) ~ (3) #fifc0:fcTtf+#-C*>*o 
[0087] (1) Sat^S3(DS?D^>SjiE^O^JttT«t9/J>$V^ 

[0088] (2)S*3S«3t^J:*ftit©lo(0^^%o, ^©EaE/^Sro'^Si:, 

time(a ') — time( a) ^ T 

[0089] (3) #JJB#^fi2i tt, ft£5iy-7f^SiJ^- r tf>AI#c3lft)*!J— 7^$tMt6m&&Zt 

timeCr ')— time(r) ^ T 
[0090] ft, ^tL^(D^#0+^OSS^BILT^^i-§(^^(^^^7|ccD+4®3(D 
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[0091] 



(l)£:(2)£#fla)o 



in L . 



[oo92] s«3se3tte3SEj{a a ^reut^/BSSEWSrtospi^M^ 

[0093] mmmm^mmt^jmm^mw^wxm , ^mm^mm^^^xn. 



[0094] z.<DWMit^fm&m^ti\3.. &t^&&(K>mFmm^^xtkm&zki 
xv^^bzmntii-^btfxzzo Mx.\*. mFfummwi<DW.m4k^smms, m. 

ft^^mmmEmm^(D^n^xmmm^mxh^b^m^x^(^ti^ 
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[0095] ft, ^S^S3/5S^S^ a "CB^LfcESEJB^MEWS^fl D#£T(Df]ETO 



xh, ^mm3*m^M^<D^mzm^-^^mm^vx^^(Dx\ 



[0097] z.<z>m^ ^mmmm<DiE^^mmx^tzt^at. mmmmn^n^^M 
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[0098] <l2©Hl(Dij|> 
(2-1. ^7«) 



[0099] 



A#^[ii-efc^) 0 -r-<^Hii^iiEPjv'^A2oo{i, ^>hii/^5epj^©(£IT, ije 



h\mm>Ewm>k(£XT, mmm^t^^^jt^x, ^mmmm^nu mm#$ 



<Dmmzm^^x)m%i-%b\s^&tmt£<>x\s^ 0 ft, ^mmmm^^^xn 



[oioo] ^fc, mi(DmM(Dmmtmm^2(Dmm.mwAzi6i^xh, ^-o-himpfmM 



^b^iJffl#1tliE^@6i^^siiEP^*O^IiE^T5<±;5^UT l bj:V^L, mm 



[0101] |EKilg7{i N ^>tV-^^h!7-^4^bTf!jffl#^e2i^^SS®8^^ 
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[0102] ^^mmftmmm, ^^M^n^^m^mmmm^m^kmm^hwi. 
[0103] g£S£§e8te, ^t°^~?^hy~?4%fr^xmmmm&£mm%-mw2it 

[0104] -r-O-HlK^fiE0^^§P82«, ^KD^Jg<D^<D^-<^HlI^liE0J^S§B32(D 

o 

[0105] j^t. BH4Sr#fl8Ue^fe, ror^.— if^<7>jg^fflflo^##ttj^ov^ tftK 
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[0106] skr-vn. &&mm8&&m&Mmmr$<nt&Tm^ ^(DimnkmrnmrnKm 



[0108] 



[0107] &nm<Dmmiz3o\, vr ^mmn, m^Mmmm^m^^b^ mm®. 



TkZ>^blz.£<Q, 



m±-fh<Db-r% 0 x &mm%-mm2i^£z>^---f&x\ t ^ time( x )&mtc-th<D 

biTZ> 0 T ^ time( r )£v^&#j5^ _h^(D^#(l) ^£<9 t i^-fcS (IP^W 

[0109] U)fiJj»^g2i/^-if,£ t t:^#bfcgaii0^#(Jii^m^7tcy-^^-, 



[ono] (2)l£; 



[01 1 1] (3) H^^g8(«^^^ffl^^t5<7)-e\ ^2^g8t*^fi^ a 1 tc^-r^^ 



[0112] (4)^s^g8fi, a uzMit^z^m^mmwmb^:tLiz.ttirz>±m 

Zb&X°%Z> 0 
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[0113] 



[0114] 



[0115] 



[0116] 



[0117] 



[0118] 



-cotkuffi %kfrtb-£-r nz-zzkiz, &&aiizttJ&'+z>E&&m7<o&&mm 

frbmim£titimM%t2'b&><k, tl < t2' £v^~£re&£ 0 



PU: Central Processing Unit) , 7°n^7^f- ^^^i-^Bg^i-§RAM(Ra 
ndom Access Memory)^Mbft;5±felt^g(^yh R^V^ (HD) ^(DftM 

Ht^tVCV^o Cltf>5*>, IiEeg^@7(D^t*^^^71, ^I^^^^«8(D# 

^^^$B8mW-<VHlI^|iEP^^S$|582(D^S{*, _hfBCPU^J:§^ 
^J^J^tfe^A^^t^LTctO^ftfe^^V^ fEI»g7(DfBlsSlS72,S:t^ 
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T 2 ^^. ^^rvC^TW^ CD-ROM, MO, DVD-ROM^if^n^t 0 ^— 

h~*smxhz> 0 

[0119] (2-2. ^xASb-ft) 

g2i#M^>hSJira#^LTf?2<D^ 
[0120] £i\ misiz^ir^^Yimfrmm^mz^^xmmirZc ^mm^nm^ 

Xh'O, E8O^^7°S10~S200tt, HI15(D^^ o S610~S800^[rI— -C\ -^<D#: 
<D*^yyS810~~S850tfmtz^mn£tltc.h(DX&Z) o &oT, ^TTO^<7>i£Jo£ 

[0121] m&mifr(Dtcbb<D~fcnffldmT-rz>t, mwmm7<D%*mfi m^wm, ^ 

810, S820, S830, S840) o 

[0122] m.^mmu, ^^m^mtmm^^Mm^v'-^^m -t% 

C*-7^X7°S850) 0 

[0123] m^. mi6%mmvtefrb, ^mms^m^tc^-obimmfEm^m^m^^^ 
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[0124] *i\ mmmmmite. ^(DMMt^^mmmm mu wmm^f-^n-^ 
[0125] mz, &&mmnm&mmi&ifrvTm&&#ifltm&$:m-rz>b, 

M a l^ft^-r?)(^^S930, S940) o ^:LT, a lO^SfflSSfiE 



^—p&m^-rz (^5/ys95o) 



[0126] g&V a l<^y— 7 x ^J^sSfjL&^f+^U a KD^SfflS 



tf (^^yS960, S970) o — ^ -f-^HlR/^mE9!^g|S82te, ^ 



n 



—^-r&fi^fr&miE-rZ (^5^8980, S990) o 

[0127] u±<Dm^^^x, m^^-rnn, ^mmmm^^^fixi^^t 

&g/vtStlX\^^t$:-mm-tZ>Z.bftX%Z> (^^S1000) o ^LT, 

mm^^m2n, ^(D^^W:^^zi^vxmm^mm2nzmm u 

3£g2ifii. ^Sltm^Sffi-T^^^SlOlO, S1020)„ 



[0128] 
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[0129] W,m±tC*5V^tt, T^—^J&<D&&4M<DmjlttttiiZ&^ttW&m<DWlft 



[0130] ^ot, ^2©Hfig©^ti8<^f'^<^WR^ijE^'>'^7 t A200fcJ;tbtf % &\<D%m<D 
[0131] (2-3. m2<DM1&<DBM<DmBffll) 



[0132] £AT* JiR^^Ttcoy— 7 r . t iMoiv-c, r G^fi t Doflf T C^te 
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[0133] ifij, mm%-mw2aiRzfi2bb&&mmi*, ^ti^ti^KDmm^m^^—fu 

[0134] £1\ g£3E^IS8*S x mm&mW2aRmb£9 s &ffl<Dim 

fftg-t*5 1 btf>£ral£L-t\ ^r^i-^^x^SlllO, S1120, S1130) o 
[0135] KSE^ a l<7)0#P B ^HiI#^i:bfei-§(^^7°S114O) o 

[0136] a < al If jS^^^ftlMtltJ&VJ: 

ler^-— if^;oag*{B!|(D^##jj-j-e^fc^fe^J;«9, jstfoj^Kt < ti^ 

$fl§(^^^°S1150) o 
[0137] Cltttt, r Hcl#UV^^^-fiS-r§^S^»8<D^^:T^o^^(iMi-^ 

jfmc£<9, ck 2 = t l^$ti§<D-C\ W±i<9, r < a ^ a2 < x 1 r 
< x 1 dS^*^t>O-C*>^ 0 
[0138] mmz.. al < a(Dt%fe, xl< x ^£*L& (^^S1180) o 

a = al<Di:£fi N t £ t 10hu#M#.0¥IJ^«, yT©¥I(l)^(3)l:^ot 

[0139] (l)flJffl#^S2a^ T £^(D3§3gM^£ t '-e^#i-5if if j£ r <Dg£ 
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[0140] (2) mm^ mm&&w.2b& % lt-toj 



8^K,£ a -e^#*T 



[0141] (3)n > nl <Dk%te. «Slg8te, *IJJB#§£g2aH:J:53-— if £ r 

b^£&^— t ii t 9^(c{itti-§ri^-rri!^-i:^5(^^sii70) o 

[0142] fct, %$2<Dmm<Dftm<D&MMuz£ti^ $&2<Dnn<om&<»ifr&\zMx.x 

[0143] (2-4. ^2<D^i&<D7F21i<D^^#ij2) 



fc/i — Hfias, tEB^^g7^^^$^fc/v— Mutt— Strs^S^&l&SE-t-sr^-e 

S1220, S1230, S1240, S1250) o 

[0145] £fc. ^S£lg8te, r©r|g^^kfcJ:5/p--HI[ift|iEj©aililcJ:»j, *Uffi# 

[0146] feaHM^^jTtcSBTOHI^^Tmt-, *Uffl#^g2a#\ y-7(0, t )<Of>J 

5fc&Mcfi, ^IJffl#^g2a«, 0-7(0, t 7 
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[(v(0), LR(0)), (v(l), LR(1)), -, (v(k-l), LR(k-l))] 

V^Tte, a-— if,^ t a f^J:5|RBE^(Hll<0p2)O*!l^#[v2't>tH|[$*tS 

a){^*5V^T^^fi8^^#$tb/cp2(DfiJ^^V(p2)^«m^o — 1£SSS8 
tt, V(a) d*e>m»U authPath(a)^JRi"5/— KO^Sffi^^y^ali^fli^iOy 
^^i~§^i:iCj:<9V(root(SBT))^f+^-rS 0 P 2 fiauthPath( a )^JSi-5<D-C v V(p2)t 

ffi&£frlZ>U<DloX»foZ> 0 (Iffl ±tllTt »^^V ^t) v2' V(p2)t? 

^g2a<D^K^ t 9^r*)§ii:^mi-^^^-^^ 0 
[0148] (2-5. ^2<DHig(^^^(D^^!|3) 

[0149] in 1 9^#itti^f- 9$E&mz.^\ ^xmw-rz> 0 

[0150] 019^*51^ fi£3g*8#fi3iEj£a©^:£«^7 f *-- ^^O^b«, 
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[0151] mi9X\ MZ^—^Mu<D^^&alz£&mm&CDU^</UX~h>Q. 



[0152] ^li^P«^iffl^i:U lBil©^SM«ttl 0 ^-(H^Sf 



5^<^-e#5 (_htet£ «pi £5) o 

[0153] mz.m20$;mm^X , 2o^±cD|g^g8i(i=a,b,n)^LT*lJJW^g2i;^ 



^£rl£Sl£g8a£>i£S,££ 



[0154] ^Oi^^lJffl#^^2i(»ara#^#bfc<D^>, lRtP^-L&iiLT/^fb, j| 

^#i-§tt#^t/^S^S8a(D^#i-5ft#^m^^^^^i:^i^^--if^ 

[0155] _LfBt£Jf Pl£3i;<9a£Lffl V ^^biCX<0^tL^>o 3H\ ^S^g8a(D^ 

#i-?>t*^^^^^B8bO^#i-^tf#^m^--a't>-^5ri:^J;<9. i£S,£a2<Dgg 

[0156] t^tc^mmsaRmbtD^&izm-rzgkftfe. m%-&. ^ssgsa^ 



T^^Si#LTt>J:V^L. &5V^il 0 0<7}^^£g8a<7>^^,£^l 0 (D5£R#(#j|x. 



WO 2006/019143 



PCT/JP2005/015085 



48 

[0157] <H3<DHi£07F^g> 
(3-1. >-;^A#ffifc) 

^e^v^)ioj(j= a ,b, •••,n), mm(D4^>-HMmmmm^mm&mmwmw.( 

, ^«ra*<^5)^tfTU flJJW=glg20i^{f 1-££5^oTV^o ^:U"C, 
^OSafiEBJ1#^%a^^Cfc#^^(i, *ljffl#^g20ite, fl^gl^iSU'c 

^—^xn^mm^x^^^zx^x^mmmm^mm-r^b^x^b 
bhi^ y ^mmmmbmM^mmmmfrmfctti-fb*LX\s^(Dx\ m.mm%m%$i 

[0158] m. *mM(DMM\z.^ v-cf*. ±KHlfi<Z>^titaj5:Sfll^&tf«tBS:«iWL^ 

o 
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[0159] ±nznM<DMWibmm^ m^^nmmm^^^xh, ^^<>v)m^umi 



m^mm^gtizm^PL^th^mxfoz,, 
[oi6o] ^mmfDmm^^^xh. nicDmrncomnbrnm^mmmmi^mm 



&m\^z.t\z.\^xh^\ 



[oi6i] B#^ijft mmmrnwm^ jEm^mmmm^^x, mmmmm ( mm^m 
[0162] ^ijffl^gioj^, mm^mm mmmwrnm) 20tizm7£<D^i??/u-7?-?&^ 

[oi63] mm^mwmmmwmm)20itt, ±m^t^\z.mm%mw2\<Dmmmmn 

tt^Mf- ^s££P23, ^SIiEBJ#^fiE-r^^-<>HiI^IiE0^^fEf|32O4. 



mm^mm mmmmmm)20ibmm^mm2i^m^E-r^x^y^^mm 

b~LXiy^\ 
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[0164] b£L<«, NF*JJBEWf^fife«P202tt, flJffl#3SSl0jd^^ft ^thtLm^COf^^^' 
[0165] >r^HEJ*SE|l33l3fc*|S2<>3r±» 5pJffl#S*10jd^©l^*!lBEW3?^:J!l*J-UTf^fife 

[0166] g£3iEse9tt. mi(Dmm(D^m<D^mm<Dmm^\i^x . mn^^mmtv 
mis mm#mm20[fch&&^mmmw<D^^M&^rttcma^ mm^-mm 

20i^^^^f$H/c^^*^t^^J:^^^t#MV^TSal^E§^^^I^E^ : ^TV^ 

sew -r s m.m vsmmm m^i^-r & m. m mMmw mffcrni x ^^m ^.mum 
[oi67] %mmnmmmi^mm. ^m^mmmm^mmmmi^h^mv±t^<D 
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[oi68] £x±<D&mmn, &K<thWi&MmRxfmmmm&ffitt^iktemmm(c 

PU: Central Processing Unit) , :7W7^^— *£JR*^5«tE^t-5RAM(Ra 
ndom Access Memory)^^^^-5^fB'tg^g (ttV) , Y^f^Z (HD) ^(DW 



[oi69] ^/c, &mm<DBM^m%&mmm%mft'rZ)7'vy9M^ m^t^m- 

X-f^, ^l/^ri/^/V-r^^^ CD-ROM, MO, DVD-ROM/ c eif(D=ii/t' > ^w- 

[0170] (3-2. ^^j^mm 

m^m^xf4^v\m^mnm^^^m22jb^.2b^m^^xmm'r^o 

[0171] ft, -T-<^Hl|i^fiEPJ^fe(CdoVNT«, ^IJffl#^g(B#^iJfiE^^S)20i^lJffi# 

m^^b^^^zMm-r^o ^x\ m20Rum23i^ ms(D^^ y -fsmzm 
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mmmw<^m^^^t^(D^^s52o , m^<n l m^^y~^^mxh 

[0173] *1\ 022£#P3bT, -T^>-Hliff|IE0J*-&(7)-r-<^Mli^|iEB^^*^{f 

^^SIO' tov^?gt5o 

[0174] mm^mmioi ^mm^mm mmmmmm) 20i^r : v^- ^-^-a t?n#gij 

ra^^^if-r^^, ^lJffl#^e(»JfiE0^^g)2Oi(i^fB§B2Ol^LT, ^ 

f^;^ f—zfrstf mmmm^M^m -r u^j-v-fsx 1 \ si2') Q ^jjs 

0^#^^UflJffl#^®lOj^^{fi-^(^x^S13', S14', S15') 0 rtu::J;«9, 

[0175] m^x\ mm#mwmMmmmm)20i<D^^bmmmm$ii®203fe, 
/&u mmmm^mm-rz> (^r^sn' , sis') 0 ro^, ra^mm^ 

If §P 1 1 £^LT , fiEBJ ^£^f (^^5/7°S20 ' ) „ 

[0176] ± : 3&utj?mz&^xt&* fijffl#gsiojicNp^i^aaEW»^tt*3S^uyt 

[0177] 023^*3V>Ttt. ^y^SW(D^^l/YmFfUm^:^"rv? > X\^ mM^MU 
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[0179] 



'S62') 0 ^tv(cj;«9, nm^mm.m\^ ^msmm^x^im 



cons] gi24^#^bT, ^^m^mmmm^m -tz^yysno' ^o^xta 



mm\-i, ^{W^3l£^LT§IEl^gl^<b^fifflS3l= 



mmmwtMfcttttxmmmzizmm'rzi^y-y'sm' , sur, si23') 



[0180] EI25^#^UT, |£ 



t(7)^^S520' tCOV>T|^^i-§ 0 

[0181] ^^mm9(D4^h)mpfmm%k^m2frK wmmmw mmmwmm 20^^^ 

mmBiE$:$£&!£mC'£iibZ>(^y7°S5n' , S512', S513') 0 



[0182] t^oT, m3<vnifc(Dmn<D4^>hmf¥mm^^j±zooiz£tLit , m^n^to 
[0183] (3-3. m3comM<Dj&m<Dmmm) 



8t£B#£iJ 



mmtvx<Dmffe£ffi^tz^^mu9 , &m^xm3(DmM<DmM<D^mmbL 
[0184] ^(Dm3<DmM(DmMcomMm^^^x^ &mmMn£mmvE$,n9v tt. 



WO 2006/019143 



PCT/JP2005/0 15085 



54 



#§tvfcEP^«JSEBJfiE-efeS rf^cD^ WJraiiEj £^Tl~3r ^ pTfg-e& 



[0187] m3<Dmm<D^m<Dmnmt'Lx \ 4^<>hmmiEm^ : T^zoo' r*. 

mm^mmmm^H^titcmM<DiEm^mMir^xo^'ox^^o 
[oi88] ±mmmmm^^^xmmmmmm(om^^m / Amm7^^^xi'tm 



WO 2006/019143 



PCT/JP2005/0 15085 



55 



[o 1 89] ( i ) wk<omiLt^^r^^ m-^mn^m-t^o 

[0190] (2) ±mm%t<V^-l/T^j<D&* izmXhi)^^XhT?±*X%Z) 0 

[0191] (3) ±fa^<Dai>'7 t ^^<D#* &2&t't-&titn&wfrrz>m^ mmmmjc 

[0192] _LfEtf>M#05*>* fcovvCtt, fcr**§Btf s . feStafflcDtf ^ 

[0193] S#(2)^ov^tt, m ; &J:<^LTV^www{3:J:<9tf^»tti-5ri:^i^^ 

<£>#$jtfefr\ 4£KHK|iE§I33\ CRL(Certificate Revocation List), OCSPi^— (Onl 
ine Certificate Status Protocol) ^§rfflV^T^^HS^(PKI: Publike-Key Infrastruct 

&&&i%&V'D'3tfZ>Z.ktf»SmkteZ>o ^(Dm, — -<TKP1 = (SK1,PK1)£ 
§ffU/^r — -^TKP2 = (SK2, PK2)lzm%&ttmi^ KPl&m$3XhZ>m^KP2 

[0195] tt n / £mm®Lbi,xmmm<D-^^^T^m m^m-r^t^nt^tvx 
^-t^x^tzbi^xh ±m(Dm< ! ¥ (3) zmtci-Mxmmz&nirzwmMxfoz^ 
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[oi96] <m&M#}*<Dmf$.&£xm'g> 

z.zx\ ±mMM(D^j^m^^^xm^^hiitz.m^M^^Wi^m^^^ & 

^mm^^^xmrn-r^o 
[oi97] (m*mm 

j=o,i,---,k)<Dy-K(D^c{i, 2 (k_i) T?fc60T\ l^/kj, §^-ioy— K^(j,i)i:^i~- 

£^1-5^1=0, 1,-", 2 (k_i) -1^5 0 
[0198] £IT, Hf&xfcMLT. ceiling(x)£x^±(DS/h£>M#U floor(x)^x^T»^^^M 

[0199] y-K(j, i) ({B.U j < k)<Dm\~i. 0+1, floorG/2)) T?*> 3©"?* 

parent(j, 0 — (j + 1 , floor(i/2)) 
i^i-^o /—KG, i) (fit, 0 < j)0£ffi<7mkte(j-l, 2-ih ^ffiiJCM 1 

ftiiO-i, 2-i+i)"efc^'C\ 

leftChildCj, i) = (j-1, 2-i) 
rightChild(j, i) = (j- 1, 2-i+ 1) 

t7£m-fz> 0 ^<Dt%, m^k(D)m^mm^(Dy—m, 0(0 ^i< 2 (k ~ j) )<zw— iw^ r 

tPathkO, 0 (y— K(j, OA^/v— McM5/— K©?!l4rV>5)f4x 

rtPathkO',0 = Kj, r(j)), ■ • • , (k, Kk))] 
i^i-ri^-e^S„ ffiU Kj) - I, Kj' + l) - floor(r(j')/2) (j' < kfcU r(j')fm^/t 

foTt^oM)T^^ ft, (k, r(k»«. m^kMm^/u—h^mvs n 

^r(k) = 0t&3 o 

[0200] vo, Ott/— KO, O^fiJ^ifi-e^^o V(0, 0£V(i)<k#< o L£L ^ k^^^ii, S 

[0201] B^SBTOfP^y^-e^i:#, leafs(B)teBtf>'J — y (D^^^-TWhiT^o itfzX* 
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[0202] 2oO»ii, i2 doV^, [il..i2] mi ^ i2^3ftf&i7^ib&5|ft^ (EK) ^ 
U 0l-i2)ttil < i ^ i2 &6^i/$^&53t^(EP^)£r^U Dl..i2] ttil ^ i < i 
2*5«8Sa&^5*^(Era)^UGl..i2) mi < i < i2*5SE8te&^*S^I-g' ( 

[0203] (IR2k^I*<0*fife*-fe) 

[0204] mmmrn (Mx-inmm) i^Hn^^hm^mmw^m^mh^^mz. 

ceUingdog (N))-?&5o i^$k(^|II^^^y-^m{»^-^2 k -efc^cOT\ d = 2 k - 

2 

[0205] £AT> L1W - 2 (k_1) (W</W(D/— R<Df@ifc) N L1L = 2 (k " 1) -d(^-^-r5l/^< 
/H©y- K©Mfc)<D % L0L = 2(2 (k ~ 1) -d) (U-</M)<£>/— K<£>j@|£) nf@ 

[0206] place© = (0, i) (0 ^1 < L0L) 

place(i) = (1, LIL + i-LOL) (L0L < i ^ n) 

place© = (W</K &3§r)Xffij$.£tlX\,^h<VX&Z> 0 
[0207] 132611, 110ftW*l^*Offi^ft(Dn = 10©|§^<D^flc^JSr^-ti><Z)"e 
£>5 0 £©J§£*fc*5V vcii, IH26^^-rii , 9s k = ceilingOog (10)) - 4£#t> x jg£$ 
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te4T?&5 0 ^rLT, d = 24-10 =6XfoZ><DX\ 6X2 = 12{i<DW</M)£>!J— 7&ffi 
*-f-5o ^cD|£^ L1W = 23 = 8, L1L = 8-6 = 2, LOL = 2X2 = 4£fc5 0 fi£ 

[0208] -m2(D\mjxm^(om^Wi 

mm omjxm^m?^) iz.^m^^bmmmm^m-i.j'mx^tj:^ ^hcotB. 
x%%m^Mm*<£>ntt&nw^x\,Kt\^nvfcxhz> 0 mrx^ ^m^^ 

[0210] ^<D^mxm$zM%)*%M)$.~tz>t% , m^mmmm (®ms. mm) 

m"^^vmFfWRmj&<nm%Kb-rz>b, wmjkM^^^m^kn, k = cemngo 

og (N))-e&3 0 ^k(D)m^.M^}^V— -7%i:feWcXX2 k XhZ>(DX\ 0frhn-l~£X(D 

2 

nm<D4^>b\mmEm^>k%:^^^0<DJ— K(0, 0)^^y-K(0, n-l)^fi|«9^T 

[0211] ^-</^0^fiJ«9^T^>tLfc, St>^^>y— K(0, n-1) Cl*j-LT, yV— h-/^rtPathk( 
0, n-W 

rtPathk(j, 0 = [ (j, r(j)), (k, r(k))] 

[0212] (— j&lc, rtPathk(j, 0 te\ rtPathkG, 0 = [ 0, KO), (k, Kk))]^^£*b5o {& 
U jl e [j„k] t^UTr(jl) = flooKi/2 01 " i) )ii-§ o )r©^ N #l/-<;Vj(j = 0, •-, 
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[0213] x<j)m%m<Dt%. y-KG, rQ)+i) tt^s— kw«>, 

rO)+i < i < ^ttez&n^MisX, y— kg, im^*£*vrv^ 0 

[0214] T(j>&ft&<Dk%s Kfl+l < i < 2 (k -V^5#i^*j-LT, 7— KG, i)^iri*$tLTV^ 

•So 

[0215] W±OJ:5**fe»cS<5v^«^$ttSJiS^mj^*tt, ^--7— m#w</P 

[0216] H27&LK g|28{i, ^2(Dm^Mm^m^m<DT /^V ^^-f%<DX^ 
[0217] -K = ceilingOog (mtTZ> 0 

2 

[0218] •n«s#ttfc-r-<^hjii^iiE0JS*<o^^-rs^[^^^-t-5o ttffl-ifitto-ejbs 

o 

[0219] -knm^bfvtcmmmm^mT\^tct^(Dm7^M^(Dm^m^m^t^ 0 

[0220] • (K+l)mW»*<Z>m&, i0, iK^-T^o ^"C, ij<^|U»ffi{*0T*$>5(j=0, 

•-,K) 0 ijtei/^/vjfcjoV^ ^Etc:^$n/c7— Ktf>8c&*1-£EJi#fc:, #c(;iw< 

[0221] • (K+ 1) m<0-7—;vmk<r>m%:, bO, bKii-§ 0 bjcDlflffifiitefalseTfc 

5(j=0, —,K) 0 bjfit, W^/H^^? — K/^fc-Sa^/^&^i-o 
[0222] • (K+D^Oge^JWJ^ AO, AK£1-5„ #E^J»* X 2 lK_i, ©ft$^^, l^/V 

\<ns—nzMQttVb*i&m%&1&^Z> (j= o, ■ • • ,k) o 

[0223] -rte^- • y-K^#J«9 T£^— ffiSr»#i"5^»[-C*)S, 

[0224] •RG,i)tt2o<D§imij{^^UTy-KG,i)^#i^ST^^t^-{it^|tWl--5^i^ 

[0225] -x, xO, xl, x2tt, /—KIOWA ^ T5M£i5«i£-T*&S 0 

[0226] -xl || x2fc£, tVh^lJ-C^$tVfc2o<DllS<Oag^T*fc5o 

[0227] -h(x) «x(D/N^^M^tf^t-^«^ffl!S-^|p]^^yv'a.PmT^ 0 
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[0229] H29i^ ^2<Dtl]^|li^^7^(D^^&On=9(O^O^WJ^i-|a-C 
, k = ceilingOog (9)) - At?£K). m^m^M^MMi^^^'^t^ti:^ ft, 0 

2 

frhn-\it^<Dnm(Dmmitm^ik\-$, %m^mi\^&o. mzs— kco.o), (o,n 

-Dt3lf'J«9STttlTV^ 0 ^M^HIl^^ iO - 9, il = 4, i2 = 2, i3 = 1 
, i4 = 0£fto-CV^o 

[0230] Clt£>£# % &L3S^Hl2<7X2.2)^ib, K(0,8)O/~b/^*rtPath4(0,8)te 

rtPath4(0,8) = [(0,8), (1,4), (2,2), (3,1), (4,0)] 

[0231] W</M)^:JoV vCte, 7° (2.3.2.1) £<9, 7— K (0,9) — KfcfcSo V< 
^</Hm*3V^TH, ^X^ 0 (2.3.3.1.5)j:<9, /— K(l,4) ^fi^§iJ«9tttfib*U (1,5)** 
^ — 7— KfcfcS. V-</V2^5oV^fi, (2.3.3.1.5) £0, K(0,2) t-M 

tfSfWfl-ltfctU (0,3)^^5 — Kto&5„ WVl^mSSV^Tri, ^-r 5^7° (2.3.3.1) 
ICW, K(3,l) {C>fiS^fiJK)#(j-b*v5o W^/MWoVvTWu ^T^X^ (2.3.3.1) K 

£<9, /— K (4,0) fcftj&sSMttltM'iS. 
[0232] g|29t^i-J;5*|i|lft^*^^^y^^^t-«^S-^* s "^^S 
o ^ — Ktt^^/H^v^-CSS^lo-CfcSo ^5 — Fia^M&Xfeibb 

[0233] ±&<DmiR^Wi3(DnM(Dmn^te\,^xfe.m7XM%ttu m3oiz.7jkir£?^ 
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[0234] gp-b, ifBHifeO^fiMtCjo^^-r^VhUII^fiE^v/^x^lOO, 200,&"tF300te, _h 
[0235] (ME^O^a<^^-i5^-Mi^f+^fe) 

[0236] 9I,B#,6<D!J— ^##(7)^:^c{e^m(^ OXt^oXy— :7<D^m + 1)<D£# N 

k (m) = min{h|m+ 1 ^ 21 ir*5< 0 

curSBT(m) 

[0237] p = Q, i) e curSBT(m) £U p^curSBT(m)<^/V— R^MtM^— h- 

rtPath(p, m) 

bW< 0 

[0238] rtPathD(p, m)te % rtPath(p, m^dRI^/— F<D?1bXm%F S £>y — 7<Dm^W-&fe 

[0239] rtPath(p, m) = [(0, i(0)), -, (k, i(k))] 

£Ut£§\ 0 ^ kl ^ kfc5#>5kli&SfcoT\ 
rtPathD(p, m) = [(0, i(0)), -, (kl, i(kl))] 

[0240] rtPathDV(p, m)fi x rtPathD(p, m)<D#/— McflJ^^fiJ^^Tfc^O-efe^o 
[0241] rtPathD(p, m) = [(0, i(0)), (kl, i(kl))] 
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<Dk%, rtPathDV(p, m)fit#C<£>J;5ft7££#5o 
[0242] rtPathDV(p, m) = [( (0, i(0)), v(0) ), — , ( (kl, i(kl)), v(kl) )]„ 
[0243] curSBT(m)lC*3(t6, /— K P = (j. i)/^«bcurSBT(m)<7)/V— Mfi^f+W-I - ^^ 

WZS—W = (?A')<DM&$:&y~- KOfgfiE^^IWauthPathTfo, m)^*^ {§. 

[0244] k (m) = kX\ 

rtPath(p, m) = [(j, Kj)), — , (k, r(k))] 
<D^, authPathT(p, m)tertPath(p, m)^m^^X^<DX^mir^t^X^^ 0 
[0245] authPathT(p, m) = 

[ (0, a(j)), LR(j)), -, ((k-1, a(k-D), LR(k-l)) ] 

r(}Wi%WC(Dm-£ , a(j') ^ r(j')+K ra')/«lfc<D#£\ a(f) = r(j')-lt?*>«9 
, r(j')/& s tf3!ifc<Z>*&£\ LR(j') = R, TQ'W#m<Dm&, LR(j') = LT*&5«S.U j 

' e [j..k-l]) 0 

[0246] ^Lt % authPathT(p, m)©gi((j, a(j)), LR(j))^ol LR(j)^§&5>£ (LR) 

V^o rtPath(p, m)(7^* 0, r(j))fcOl v"C, r(j)3&SflB££tf>£#, (j,r(j)+ 1) %(j,r(j 

))<ZX&*t^J&fcV M, \ K0*S^<75^# V (j, Kj)-l)£(j, r(j))^M^^V^o 

[0247] CL<D<b#, authPathT(p, m)te. rtPath(p, m)£>/V— h^^O^O^M^^fc^V^tife 

[0248] £fcauthPathT(p, m)^^LR^^<Dtt#^I^V^^^> ; ^authPath(p, m) £#< 0 BP*> 

authPathT(p, m) = 

[ (0, a(j)), LR(P), •-, ((k-1, a(k-D), LR(k-l)) ] 

authPath(p, m) = [ 0, a(j», — , (k-1, a(k-l)) ] 

authPath(p, m) = [ (j, a(j)), — , (k-1, a(k-l))] 
^4-^^tt{iauthPathT(p, m)^TOj;5^ti'^-e# ; 5o jl e [j..k)^bT, rtP 
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ath(p, m)<D\s^/Vj{(D;— Ktt 
(jl , floor(i/2 Gl _j) )) 

t?3:Z>(DX\ floor(i/2 Gl ~V^i^fc5£#LR0'l) = R, W%TQlbZ>b% LR(jl) = Li: 
authPathT(p, m) = 

[ (0, a(j)), LR(j)), • •-, (flc-1, a(k-l)), LR(k-l)) ] 
£*3ttfif.fcV\ ) ^ot, authPathTCp, m)£authPath(p, m)<D— jjfrtbtilJ3$:$\-W--?Z> 

[0249] authPath(p, m)&^authPathT(p, m)<7>cp-C, m# g <Z)y— ^(DfiJ^fjf^^^o/cBf 

authPathD(p, m) RXf authPathTD(p, m) 
bfemi-Z) 0 authPath(p, rnXS^authPathTXp, ni)&±.m<D£?{zm : $i£thZ)b% ^ 
kl S k-j&&k£, 
j^j(0) < j(l) < ••• < j(kl-l) 

tez>0&mmo), Kki - Dds*)?) % 

authPathD(p, m) = [ 0(0), a(j(0))), — , 

(j(kl-l), a(Kkl-l)))3, 
authPathTD(p, m) = [ ( (j(0), a(j(0))), LR(j(0)) ),•••, 

( 0(kl - 1), aOtkl - 1))), LR(j(kl - 1)) ) ], 

[0250] authPathD(p, m^t^authPathTDCt, m)iZ^ ^fhizm^^/— V<Dm^W^ 

Mz.fch<D$:, ^ authPathDV(p, m)^t^authPathTDV(p, m)it< 0 a 
uthPathD(p, m),&tFauthPathTD(p, m^Jnf^J^^^tl^irt, 
authPathDV(p, m) = 
C (0(0), a0(0))), v(j(0)), 

«j(kl - 1), aOtkl - 1))), vC(kl - 1))) ], 
authPathTDV(p, m) = 
[ (0(0), a0(0))), LR0(0)), v0(0)), 
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((j(kl - 1), a(j(kl - 1))), LR(j(kl - 1)), v(j(kl - 1))) ] 
k$3< 0 --"C\ #j' e (j(0), -, Kkl-DJ^^LT, v(j') - V(j\ a0')) -C&5 0 

[0251] Ji^ojiii^m^^^^&ofpi^^^&^i^^ y-^^-^-m^y-^idii^f'i 

^ffi^W^) ^Tfc^^-e^g^O)II^^7tc<Z)«^^^.Tb, £>-OauthPathTDV(p, 
m)/^_hf£tf)J;5^£;n^><b^\ /-Hp = (j, 0<^fiJ^ffiV(p)i:authPathTDV(p, m)d> 
hUT<^X^^XM^<DJV-hm^n-f-^t^^o jl e [j..k] ^^J-LT.v 

[0252] (l)v'(j) = V& 0 

(2)jl e= [j..k]tC^j-LT, v'ODii^i^nfcm, LR(jl) = L(D^#, 

v'Ol+D = h(v(jl) II v'OD) 
LR(jD = R 

v'Oi+D = hCv'OD II vO'D) 

[0253] ml, m2*IK2feJfe#&7|cy— ml ^ m2ii-5o Z.<Db%. 

curSBT(ml) £ curSBT(m2)-Cfc5 0 
[0254] p = 0, 0 e C urSBT(ml)t-f5o Z.<Db%. WTO(l), (2), (3)^iI0 0 
[0255] (l)rtPath(p, ml) £ rtPath(p, m2) 

(2) authPath(p, ml) £ authPath(p, m2) 

(3) authPathD(p, ml) £ a uthPathD(p, m2) 

rtPath((0, i), m), rtPathD((0, i), m), rtPathDV((0, i), m) 

rtPathG, m), rtPathD(i, m), rtPathDV(i, m) 

authPath((0, i), m), authPathT((0, i), m), authPathD((0, i), m), 
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authPathTD((0, i), m), authPathDV((0, i), m), authPalhTDV((0, i), m) 

authPath(i, m), authPathTG, m), authPathDG, m), 
authPathTDG, m), authPathDV(i, m), authPathTDV(i, m) 

-5§-£ri0, E£A<Pl!ffi«J#-§-$:ilfcU i0 < ilt-t^ 0 — fl$l-> m&M%)*<DS'-hX0, i 

)tC^j-LTrtPath((0, i), m)tt^T©«t5tCff3*"C?t5o 
[0257] rtPath((0, i), m) = [(0, r(0)), (k, Kk)) ] 

<&U k = K (m), j «= [0..k]tC>Pj-LT Kj) = floor(i/2 i )^S< 0 
[0258] r©?J(iiaoT, K(0, i0)<£>/V— h-/^rtPath((0, iO), m)£y— K(0, \\)(D;V 

— lw^rtPath((0, il), m)^f+»-T^ 0 i"^, rtPath((0, iO), m)£rtPath((0, il), m) 

frzmmvAm^wctz* z<Dt%, mm^~m^ttmm^ . k(o, io)^/— 

K(0, iO) <D^jfL& (confluent point) W-£ 0 ^rLT, ^MOl/^h.^-^V^K^ 7 
— K(0, iO) (a-— if^)O/-K(0, il) (KS^) KlJ:5»IiEj£ (authentication point) 

[0259] A^_bte, a.— if^^S^*s|^— ©jg^^^jR^^^feitsaaE^© 

iffi*<DmirzmikMifott*±f££ftzm&ia-iL, sbt©^— h%m^-— ~f&<Dm 

[0260] (M&lM%0*<D&mi) 

B&&ZmfcM%)*<DUftmftM%}*-?. *>S^»C*5V^, last(leafs(B))tC*j-^ 

[0261] 
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, #C<7>l4|f2^?Wco 0 
[0263] (]&&M1fi*(0&W2) 

roundGO)t31*3V>T, C^MUm^^it U ^{iround(il)^*5V>T^4 

[0264] (D^SE^OfJ^W, «E/SL HP*>/-K(0, iO^MEWfcrttt^-^fc 
[0265] (2) ±SBf«k£(j', i')£*3<£. authPath((0, i0), il)^«i-S/-KT\ l/-</V^j' 

i^/j^v^o^i-^fJ^ii:^, y-K(o, ii) ^^-r^^^^K-esara*^ 

SSW^Uffl^/^ 7-K(0, il) lzMfo1r%yV>\?^m^\<^xmtX%%mmWi 

[0266] gpib, il ^ i2blTZ>t, authPath((0, i0), iD^M"*^/— K"C\ W-VV^j'J^/h^ 
t^tC^J-r^fiJ^jiStt, EOC(i0)fc£V MiCTokenGO, i2)^^m?)o 

[0267] (3)±KM^ofij^jii:sLt»tPath((o ) io), i2)[z.mir^y-vxu^<^mmm 

^oi/^/v^/J^W-K^i^itte, y-K(o, iO)^SSIIiE0^«^Sab^iJffl 

y— K(0, iOK^fbfeSSIiE^#(SSIiEB^#rt«^— ^^-atp)^^tf^i-S 

^bftXZZo 
[0268] -te^OUE^ 
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[0269] (1) *T,«@ U)fcoV>T031fcfflVvootft93-«. r^T\ ^jftjfii&G. i) x ^ 
OU^h-^^K-CfcSBajEjfeSrO', i*)fc*3<o R(0, il) <£>curSBT(il){£:}otj-<5 

^-h./^ rt path((o, ii), iDtcjov^, (o, ii)^^i±s^LT. &%t&icmz>w.m<Ds 

-KSrO*. i")i:*5<o ^>££\ SSEAtt, (f, i*) ©&«^jfe-C*)5 0 Hot, BSE/* 
7authPathT(il, il)<Z>j£gfc&»£> N (0", i'), LM/— K(0, il)<DcurSBT(il)^*3(t5^EE 
^{^£tt3 0 7— KG", O^OffiOfU^Tte, round(il)J;9iiiNa&t-TL-CV^ 
5o iot, (0", i'), L, V0', i'))te(0, il)m»i-5S3ffiiiE9g#rtM^-^U:^*ix 

•So 

[0270] (2)^{C1JS@ (2)tdoV>TEI32*3«tt^|g33SrfflV^oo|ft§gi-So 
[0271] k = k (il) ^*5<„ 

[0272] ML£(j\ i') tt/— R(0, i0)<DA~- ]w?;*rtPath((0, iO), il) fcl^£iX"5„ 

rtPath((0, iO), il) = 

[(0.K0)), (j'.Kf)), (j' + l,r(j' + D), (k.Kk))] 

[0273] t.tc. authPath((0, i0), il)(D^mX\ l^/l^'J^/J^W— K<£>3fetF3r 

[(0, s(0)), (j'-l, sO'-D)] 

[0274] #jl e [0..j'-l] tdMLT, V(jl, rOl))a*EOC(iO)fc5VM3:CTokenGO, i2){C^^tL 

[0275] authPath((0, iO), il)cD^^(vlJ:*9, 

authPath((0, iO), il)©W <Ajl<£>gatp2 - 0*1, s0"D)tt, rtPath((0, iO), il)OW</H 
1 + I<£>^5?ip3 = O'l+l, rOl+l^^h-^^/WK-efe-Sd^VNfil/T-h-^^/l-K 

[0276] (^l)p2^ p 3<Z)^h-^-r^K-efeSi:# x Hl32{^i-J:7^, p2<D#J 3 ffiV(p 
2)fit, il ^ BfcBfcSJWC, CdSgfff-CtSiSjSE^^— ^ CTokenGO, i2)fc^&h, 

So fciffcbtf , Itl^^^ttKKcio, y— 7(0, iDtcMJ^i-^^vHW-o 

hJlR/^lE^ *Q.JStfS|&bort:B#j£-e % lll30OB-e*$iX^:curSBT(il)^|fU^7|c<7)fiJ ^ 
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[0277] (^2)p2d5p30W7h-^^/VK-Cfe5i:#, g|33fc**i- £5f-. /-Kp2<E>#JH$ 
1gV(p2)fi*, roundGO^^MK^ 

Vi e leafs(B)[i < iO ] 
-efc*9, totB £ curSBTaora^oiO-efSsSiJ^n^^^^KO^^BtlC. leafs(B)0 

tt^flttttflfc^U-CV^So iot Jii^A^/fcotiKl^W. p2 = root(B)<DfiJ^fii: 

fi, iO"eWUS'J$H59^K^*3V>-CftSL"CV^So t^oT, p2iiauthPathD((0, iO), iO 

[0278] (3) fSSE'^tf^il&lfE B (2)*^ #jl e [0..j']^*fLT, V(jl, r(jl))££*T 

[0279] *1\ V(0, mX^^h&mUm&l^t&lX^ ^y-K(0, i0)(7)f"J^ jfi^i-^o 
[0280] JfcfcU jl €= [O.-j'-D^^L-C, V(jl, KiD)*sfHr$*vfc^3£b, V01+1, rO'l+D) 

^J^T^i^i-f+^i-^o KiD < sO'l) (Dt^ii. 

V(jl+1, rQl+D) = h(V(jl, rOD) II VQl, s(jl))) 
tU s(jl) < r(jl)»^#», 

v(jl+l, Kjl+D) = h(vOi, sO'D) II v(ji, Kjl))) 

[0282] i^iij^S^LT&blM^y^ 
#C<Dt£W3;^&9fco 0 

[0283] («M^^)7H:Ott©3) 
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[0284] 
[0285] 

[0286] 

[0287] 
[0288] 

[0289] 
[0290] 

[0291] 

[0292] 



(*1) time(aO) S [0..T) 

(*2) time( a ')- time( a ) ^ T 

(*3) time( x ')-time( x ) ^ T 

(Da e [ T .. t '] W£5^£5fc3|£S,k a ^#fti~^ 0 

(2) a e [ T .. x '] fcjfcSZitCtSSlE^ a tCO^T, x (O a.\Z.X^>WM.^Wi% 

m^^-^n, a^<D^m^m^v—^m^ixiizi6\^xz,^mi-^ 

(*4) time( x ) ^ time(a ') < time( x ) + T 

(4)T ^ time( r ^ r Ho^T, a < t^i^gj^a 

•t£ ft 3 (DIM 

(Da e [ T .. x It^X^Z.izX^h^^.a^tEL.^^tm^-r^o x X 
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time( a 1) < time( r ) S-t/ time( t ') < time( a 2) 
J&S$!9iz:o 0 time(al) < time( t ) £Q, — time(al) > -time( z ) £&<5 0 
[0293] ^oT, 

time( a 2) — time( a 1) > time( t ') — time( z ) ^ T. 
— time(a) e [time( z )..time( t )] £&5«fc5ftZllC.fc5fc5g£jej& a 3&S#£L& 

tirae(a2)-time(al) ^ T y^^ltHii^^^V^ J^Ji£^ 
time( a 2)-time( a 1) > T time( a 2)-time( al)^T 
kft*>Z'J&1i*%f&*inZ>o to-C, time(a) e [time(t)..time(T ')] £&5«fc9fcZ.l£j;5 
fc-5^^a ^^b/ c eV^<^V^5^^tt^ , 9■^fe , 9. time(a) €E [time( t )..time( t ')] 

[0294] t £Q&iZ&miT%Z^lz£Z&&j&&ft&Vft^m&&^tto Z.<Db%. 

time(aO) <= [0..T]fc5S£St;& aOlCoV^T, 
a 0 ^ [ t .. r '] 

[0295] (2) ±3£<DjR?fc&Jl&*©t£ft2 ir^i (D^fcE*>»c3|A»ttSo 

[0296] (3) z £m\^<D^&tf&&1r%^WZ£V)M&fttf'rZ> 0 
[0297] m&D z «t9fltrtCZiOS3c^d5#^i-5#^«r%^.5o t iOtfrC, 

time( a ) < time( t ) ^ time( a ') 
ftoT. &#(*2)<fc*>, 

time( a ') — time( t ) < time(a time(a) < T 

time( a ') < time( z ) + T 

[0298] (#^2) t i<9ffj^2 J O^S^^#^EU^V^^^%X.5o t£JC3<Dtu-iitU;*K Z. 
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<^S,& a 0-etime( a 0) < Tbte&b&ftfrZo 
[0299] time( x ) ^ time( a 0) < T 

time( a 0) — time( x ) < T-time( t ) ^ T 
=fcoT\ time( a 0) < time( r ) + T 

[0300] (4) 2,(7)^,6 aOT\ time(aO) e [O.-^^^O^^-f-^^v^iffi^^C*!) 

[0301] (IHI^^^^ti»4) 

SBT^ri^$k<^)i|I^^7|vtL, i£SBT<Djl[I#^|^y— ^#-^i:L, kl ^ k£:U a 

uthPathTk 1 , authPathT(i)tf>a|JJ COk 1 {@ (D (D^l b1r& 0 
[0302] authPathTkl(i) = [((0, i(0)), LR(0)), ((kl - 1, i(kl - 1)), LR(kl - 1))] 

bW:< 0 $e>(-m:\ vl, v2^^2o(D/^^{fi^bs API, AP2^^(Di5(--^-X. 

[0303] API = 

[(LR(0), vl *((»), (LR(1), vl'(D), (LR(kl-l), vl'(kl-l))], 
AP2 = 

[(LR(0), v2*(0)), (LR(l), v2'(D), (LR(kl-l), v2'(kl-l))]. 

[0304] (*i) #j* e= [o..kl] l^LT, vl%-0£WTOJ;M£f?!l*lft^#5o 

[0305] vl"(0) = vl 0 
[0306] j' > 0 T? LR0"-1) = L 

vl"(f) = h(vl'(f-l)||vl"(j'-l)) 
j' > 0 T? LRO'-D = R <Db%, 

vi"0") = h(vi"0"-D II vi'O'-D) 

(*2) #j* e [0..k]^*fLT, v2"0")SrWTOJ:9t-l?»6«)»-^iC)'5o 

[0307] v2"(0) = v2 
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j' > 0 X LR(j'-D = L (Dt%. 

v2"(j') = h(v2'0"-D II v2"(j'-D) 
j' > 0 -C LR(j'-D = R <£>^ 

v2"0") ^ h(v2"0'-l) II v2'G"-D) 

vl"(kl) - v2"(kl)^£1-5 0 j" e [0..kl] -evl"0") = v2"(j') £&3S/h<7>i'£j 
l^H<o vl v2, EP^ vl"(0) * v2"(0) XhZfrh. jl > 0 X&>Z> 0 jO = jl — 1<>S 

[0308] (#^l)LR(jO) = UDt^o jl, jO<Dt<9^<£<9, 

vl"(j0) * v2"(j0) o 
[0309] t^oT, 

vl'00) II vl"(j0) * v2'(j0) || v2"(j0) 
— _ha&<D(*l), (*2) A»e>, 

vl"(jl) = Kvl'OO) II vl"(jO)) 

v2"(jl) = h(v2'(j'0) || v2"(j0)) 

h(vl'(j0) || vl"(j0)) = h(v2'(j0) II v2"(j0)) 
t£oT, vl'0'0) II vl"G0)£v2'(j0) II v2"(j0)#\ fcf^ffiJfc^y^Baafe h<Dffimtt£Z> 

o 

[0310] (i§^2) LR(j0) - R <Db&, m^lK^^tmW^X^ 

vl"(J0) || vl*(j0)fcv2"(j0) II v2'(j0)tf5, tf^ii^^iiC h<7>«^t*5^^*S 

[0311] ^_ta^ if^^o#^t>, mmmm^y^^mWi hommmnz-t^Zo 
[0312] ±mvtzmiR^M3(Dmm(Djfmi^^^^nnm^m^^^Rrf-{ 
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^b&mmx&z> 0 

[0313] <%4<DWfa(Ol&1&> 

(4 - 1 . is*?? 

2i(i=a,b, -,nk Rri. £x±.<D&mm&ffimz.mm-rz>. mz.i*. 
[0314] sE^^gia^, =^~—**vh7—?3&&jt'Lxmm&mmik7 ! --*<Dm£m 
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[0315] ±&vti£?^ ^^wmmw^m^wate, m&.mtt&m^^x^^h 

[0316] )ii^^7^<D^y--K(y--^^^<)^f'J , 9^T^^ii:c7)f+^:^fe^, J^T^il 

") bM-f 0 ^<D&?[z.\^XT&<D\s^/v<D^m\m*h±A±<D\/^7V^ 

[0317] ^T(-*5V^te, 035^^-t"i9t-, 16B<DV — 7 ^^^WkM&tt^Ws'k^ 

frit, w</i^0J;«9^W— K(gp^y-^-Cli^W-K) \ztt-rz>W.(D%mte, 
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[0318] 4\ J«^y»y— ^^ilJ'9ST^^^>^f6^v(0 > 5)Tfe-5<^t 5(0,5)-? 

fe5£th w(7>^>^jav(0,5)^bA'~ HfiH (=V(4,0))£rjfc#)<5{e:te x V(0,5)(CV(0 
,4)?:£^e,IgLT, ^v^.fthl'£f+^U s^^^^^iilhl' tCV(l,3)£;&ftiJ/?)^ 

v^ith3' £rff#U $^>^f^N5/^th3' tCV(3 ,l)£;&#]^^g^LT^v^ttH 
(=v(4, 0))^rti-m-rtb{lj:v\ ^(Di^^^JiS^^^vCo.s)^^^^^^— ^( 

wCTIWO, 4), V(l,3), V(2,0), V(3,l))^^/V— HfiH^ff#-e#-5^$, V(0,5)«/n 
[(V(0,4) , L), (V(l,3) , R) , (V(2,0) , L), (V(3,l) , R)] 

[0319] -r-0-HllM^fiEP^^^^$|3l3a«, @36^-r i^^S:SSEPJ# EOC(y)^tf 
raj&^Srffr&U ^Jffl#M2HCi£{f i-5i5^oTV^ 0 EOC(y) 

[0320] mwfcma^ nm^mm\<D^(D&^m&(Dmmffi^—?TK(Dfo 

xte, v(o,5)ictox, v(2,o), viOAMmmm^T^xh^K V(l,3), V(3,l)teV( 
o, i5)^fij^e>tv7cNF^ai^^M^^a«^x-^-efe5„ £fc, -j&K:. & 
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i intern ^v^.^v—^&KDmMW^f—^. ai^^^^MM^ 

/-K(l,3)-Cfe§ 0 

[0321] ^igmo^s^&tf 

tv$& 0 4\ &z>mmmm2ifrb<D&m&&xi u—no, 2)), x2(y-K(o, id), 

X3(7-K (0, 18)), X4(y-K(0, 21)), X5(/-K(0, 29)), X6(/— K (0, 31))T?fc5 

[0323] (vxiMjcSortzmmfo^ia-t, xi^gppfM^-^^tts ( Md^mat 

[0324] (2)X2^^*5{t^fIEP^^^fi, X2/&<DgpB#tt5^-^ RTfXl&<DX2£jZ 3d 

3,0), K(l,4), y-K(0,10)O*ii^{ii:, XLfe(DX2^JC*5ttS«M^^— ^ibT 
,/-K(0,3), 7-K(2,l))OfiJ^jig 0 
[0325] (3)X3M.i^f^t£m!t^at. XS^ipi^t^— ^ N Mt^CXl^I^X2^ 

LT, /— K(4,0), y— K(l,8) <DfiJ^il\ XL^(DX3^^*5tt^ilM*^— ^tbr 
, y-K(0,3), 7— K(2,l), y-K(3,l)Of"J^{i£, X2^(DX3^^*3it?)ilMM^T : - 

*£lt, y-K(2,3) (D^mmo 

[0326] (4)X4^J-*5(t^fiE0J^^^«, X4^(DIP0#M^— ^ MlFt-XL^, X2,ft,& 
^X3^0X4^J-^tt§ilMM^x-^^M$ft5 X4,£<DgpP#«^ 
^-^irb-C, y-K(4,0), /-K(2,4), 7— K(0,20) <7>fiJ^fit, Xl^(DX4^^*3{t^) 
ilMM^X— ^LT, 7-K(0,3), /-K(2,l), 7-K(3,l)Of ij^jjt. X2,&<DX4,& 
tC^oit^ilMW^-^^b-C, 7— K(2,3)(DfiJ^jit, X3,£<DX4,£J£:fetf-5j 

^f-^tut, y-K(0,i9)cD#j^fii:) o 
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[0327] UT. X5RZfX6lZ joV vOb mmXfoZ> 0 ^<D£? ^ is— -Jr^^tSnlfrsSlC&V 

o 

[0328] fujB#§£«2ira:, =>-t o ^— ?z&ft\.x°m5mm.\*b = f— 

[0329] rr-C, ^^WK#l£K&SE$&23aK}\ ^3IIIE${^UT^T<&&SEtt&#&£Mift 
[0330] ^l(D^fiE^tg^bT«, aEPJ^gla0^^^f^§P14aS.t^m^W1t# 

[0331] m2(D^flE^iLT«, ^tt#2&S^IB$ft3tfre3^-Cfc. fUffl#3S«2I©« 

[0333] fc§)llS^:^lt)7^(Oy— 7a{vl>Fj-LT N ad^/V— Hcl5/^iSra©;v- h-^7^lJ! 
, rtPath(a)^*< 0 rtPath(a)\zmirZ>y— KO^- Y)£kf\-<Dh<D<D5L%,;— K(sibl 
ing node)d^^^y— K©afelf£r»SE/**£n¥t^ authPath(a)i:#< 0 

[0334] rcDirt, *>5Hg?fe^*^^:©2o©y— 7ali:a2tcoV^, al<tt)^tCa2dMiSi-'5 
£tx al^^/V— h^M^^<ta2*^V— htcMS/^O^gfEi-^^^r, al£a2<£>^ 
»fL&Wt>\ ^^^<0W7h-^-r/l/Kte#J^)^-)^al(Da2^J;^|iE^^^ o #!J 



WO 2006/019143 



PCT/JP2005/0 15085 



78 



[0335] 4\ 2oOflJffl#3S«2A a R.rJ«2B*S, ^tl^frK ^~~^^^^X<0 , 

&<Dmmjfc i g*W&'tZ>h<DbV. al, a2, af^flJffl#i§g2A<7> 

$^^^O^^^mi-^IJffl#^S2A<Z)^^a^fo§ 0 



[0336] i/— ^^Nt^^Uc&V^-m, — I 



■Ma£<Df$£0 {^jSV^Ttt, Sflk^a^a 



[0337] tot, 038£>#£\ »»^afSrW^^Ufet#OS^ie^||*&7|c^*5itS, 

[0338] w, w±o#^g«. 'j?t£<bhmwmmRxfmmmm%ffitt*&&mmw (c 

PU: Central Processing Unit), ^n^^f- ^SrJDljffti"Sttli6 ; Sr#i"SRAM(Ra 
ndom Access Memory)#/^£>&5^f£lji^g(^y) , />— K^f-X^ (HD) #tf>flK 
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[0339] (4-2. ^-TcrJ^W) 

fc&&i / Ef$-rz>W}fE&mw-t-z>iy-- ^^mxm, nuo&iMm, mm^mm.2\ 
^mtmmimvxm2(DmsL^nmi^um-r^y-^>^mx^ 0 
[0340] \ mz9^mux. ^>hmmuwjfmi^\,^xmw~fz> 0 
[0341] mm^mm2imiEmmmia^iy^^'T-^y^t?mm^^mm -rzt. m 

^^SlOa, S20a) o 

^■7"^/^°S30a, S40a, S50a) o 
[0342] Z-mZ-£0^ fijffl#^@21«, S:aiiEig$^tPfflEM^«r^#i-5w^*s-??#5 ( 
^^S60a) o ^:UT, flJJB#£HS2Itt, r<D^^7°S10a^.tFS60a(D|iEB^^^^ 

[0343] — *\ KE^glaTi^ ^Wffl (KM&^I #J$P^ ) 1*3 

-t"S(^^^°S70a, S80a, S90a) o 
[0344] EI40«r#RgU/j;dS^ % ^VHlIiW^SE^jfe^ol ^Tt^-f 5„ Ctlft 
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mm) *tttfx&m&mfem&%mm&mw2Biz.mim~r% (^T^rsnoa)* ti 

;£¥y^*£S{fUcflJffl#i§g2Bte, Stt^ofcSSfiEej#EOC(a)^fby-:7 
^^n(a)^ffiL, y-^#^n(aU^^t^y-^#-^^IJffl#^g2B<7)^^» 
^^^1-5 (^X^S 120a, S130a) o y-^#-^n(a)J:«9^t^y— :7^#^ljffl 

^IJffl^-^g2A(C^{fi-§(^^ o S140a, S150a) o rtUcMLT, y— ^#-^n(a) 

[0346] y— 7##n(b)^flJffl#$|«2Bd^Sfi Lfcf IJffl^£§g2A«, y-!7^n(b)J;9 

^af^io^§a-MM^X-^lateData(a,af) £&#U fUffl#^g2B^ff -t"3 
T^^SlGOa, S170a, S180a, S190a) o ft, tk%ttffe'r~ ^^UcD^CO^^-fe— i/^flj 

ffi#^g2BA^Sff Uh£#f*, ^lE^Ti"^ (^r^S144a) 0 
[0347] ^IJffl#^g2A^^3S®M^T ? -^lateData(a ) af)^g:ff bfc^lJffl#ilg2B«, y 
— ^»J#^n(a)tn(b)^^^^^a(D^^^b^*fi-^|jE^o^ftg:U. ^:tf®lo 
fcSSmE0jl»EOC(a)tigM^-^lateData (a.af) ^^M^<^#J ^ffi^f+»-T 

^(^x5/^°s2ioa) 0 #cm, ^m^b^mtiLmmEocm^^ti^mw^— 9 

^ift^^TV^^^^, »^a^^^bJ;^9B#f H 1^^f^^^^^$tLfci:V^9*J 
^Mm^lJffi#^g2A^^{f -f5(^^^°S220a, S230a) o — 3r\ ^HE^^fJ^ 

ift/^m-cv^v^#te, ^^a^^^biOB#^^^*ij^M$ftf^i^iiE 

S220a, S240a) o 

[0348] f"Jffi^g2A{i, ¥lJS^^{f U 5f#«OT% 2^IJffi#^^*5 
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^T&mmm&&n<D&mtfywi&&tiimTz>z.b7P-v%z> (^^^S250a, s26o a ) 



[0349] m, ±&istc^^>himmmwmiEifmi*. mm&mmAiimm&mmBiz®; 



[0350] £1\ ^Jffl#3£S2Att % ^liELfcV ^&SEBJ$EOC(a) (S®^am*3tt«6S3aiiE 
^#)^#(tTHUfi^*IJ^^^^IJffl#igM2B{C^>ff (^^^S310a) o ml« 
^J^^SrSftbfcflJffl^g2B«, S(t^ofc^SliE0J*EOC(a)^^y— 7 
H^n(a)£Jlij!±}U 0— ^#^-n(a)J;<9/J^V^— :7#-5§-. &t/y— :7#-5§-n(aU:fr)*:# 
V^y-7#-^^lJffi^g2B(D^^^O^^^m-r^(^^^ > S320a, S330a) o 
y-^#^n(a) < t^/J^$V^y-7#^t>^-^#^n(a)ctt9^:#V^y— ^^-^^fljffl 

^g2BCO^^^fcS^^{*. y-:7#^n(a)J;9/>£V^y— ;7#^(D^S;£b 

S340a, S350a) o ft, &m-tZ&&L&&te^m&lZ.til. tt^B^— ^UD^O^ 

5 /-fe-v ; |rflJffl#^S2A^^{f-rS (^^7°S342a) 0 ^LT, flJffl#^g2Att N it 

^^tg^-^^LOi'(D^-fe-v ? ^Jffl#^tt2B^^{fU^:i!^f*, ^iE^&t-T 
(^5/yS344a) 0 

[0351] NT\ ^Jffi^-^g2B«, mm&b&Wfc&m&bnztotf&mmffi^— ^lateD 

ata(b,bf) £&#U y — ^f^SlJ#^n(a)tn(b)^^^^^a<D^»^b^^fi-^^fIE^ 
o£ff #U SSHE0J«EOC(b)^iS®M^^ ^lateData (b.bf) £>ibSBfiL£c7)*iJ ^ 



ffiSrf+^-rS (^5/rS360a, S370a) o ^^a<D^:3SliE0J#EOC(a)^-^* 
^H:£tl^V ^^J^m^lJffi#^S2A^^f -TS (^^^^S380a, S390a) „ 
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iZ^it ~fZ> (^^X7°S380a, S400a) 0 

[0352] zamm. nm^mwiM^ m^^^itu &m-tz<Dx\ 2mm#mKis 
^^x^mmmmmn^mr^m^^ui-^t^x^^ cx^s/^ioa, S420a) 

o 

[0353] m , ±^L-tc4^oHw^mmmiE^mt, mm^mm.2ARmm^m2B^ 

[0354] fi£oT. m4(D^<D?f0^(D-r-<>'b)liff|iEPJ^xAlOOa{Cj;tU«\ 7Mtig£ffl 
[0355] <M5(DMM(DmM> 

(5-1. ^fi^i^) 

[H42{i, ^0^(D^5<D^ffi<D^S^#^^>HlBi^liE0^^^A2OOa(D^ 

g5l(I=A,B, •••,N), WJKO^B^SK^^-t-?), -T^— 

IB, miS0^^^^J;O*^$^3Vt^-^^h'7-^3a^iix.-C^«9, 
^S4a^flJffl#^g5I^^OfiE0^M^(^^T, gSliEP^#^tfliE0J!^^flJ 
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[0356] *mM<DtemtM4<Dmm<Dj&i&bte. mn^m^tm^h(Dx^> 

[0357] SETO®4afi, rn^fc^— ^yh!7— ^3a£^LTflJffl^g5l£::r — *£>j£^f 
^^^>h)IIfffiE0J^Mi-^tf#^fBlti-^fBlt^42a^^-r5«^-efc^ o 

[0358] ^^vm^mm^^FmM^i^ m43iz^-rxo^mmmm Eoc(y)^tf 

fE^/&^£ffr&U ^IJffi#^g5HC^f i-5<fc5lwfcotV5. SMEWS EOC(y) 
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[0360] r^T\*^iSO^^it5iiEW^O*^^!ll37^fflV^|fePJ-t- ; 5o ft, 

5lJ&>k<7>S»j&aSXl U— K(0, 2)) , X2(7— K(0, 11)), X3(/-K(0, 18)), X4(7 
— K(0, 21)), X5(/— K(0, 29)), X6(/— K(0, 31))-?fc5£-f5o 
[0361] jg^^^lcasVNTtt^Sjft/St^V^WTOip*^— ^^fljffi#^g51 

[0362] (l)Xl^m*5tj-58EWJE£:«:i!:tt, XL^<Dgp^M^X-^^^^(*^^)^« 

, K(i.o)©«ij^fi)„ 

[0363] (2)X2&AZ$otfZ>tmfo^a-t, X2,£oBP(«^X— ^ ».l^Xl^(Z)X2^^33 

3,0) , /— K(l,4), /-K(0,10)<^#]^ffi, Xl^(7)X2^{Cjo(t^il®ffi^T f — 
/— R(0,3), K(2,l)(D«^ffi) 0 
[0364] (3)X3j£fcl:i3tt3i£W}S#K:Bu X3^<Z>gP0#M^-^ RXfX2&<DX3&lZ.*3 

tf%mmffi^-*i>m£*bz>(Mfcma^ x3M.mm^^—^tvx, s— k( 

4,0), 7-K(l,8)(DfiJ^{it, X2^^X3^^*5it^«M^-^^bT, /— K(2,3) 
©#J^«) 0 

[0365] (4)X4^fc:fctt5ffiWJ£«rtett» X4,&OBPBf MtSt'-^ S. 1FX3,&<DX4,<&^*3 

4,0), 7— K(2,4), 7-K(0,20)<D#J^jjt, X3^C<DX4^^*5tt5ii@M^7 f — 
, /-K(0,19)tf>fiJiH£) o 

[0366] j^t, xs&tm^^Tti^-tr&So ^<z>£5^ 3$0M^*"5£(-:fev^-cte:, IE 
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[0368] m44iZ.m-t-£5\ZL. MlkM$rtzST2<D3KDV— 7al, a2, a3^&*^^(D)l|I#-e*j 

[0369] , a2,£Oa3,£jC:fctt5j§M ; Ni7cT f — ^tp^ftk W</^/WV V~ K©V^ 

/V£rj2^®< 0 al<Da2{C£5f&IiL£3rAP(al, a 2), ^<DJ^|£/— K£AP'(al, a2)£ 
AP(al, a2)<Dl/-</P£jl£g< 0 

[0370] ClOirt, lit, al^C<Da3^t(C*3ftSil3SM^7*— ^^£H3ME/^y— K<£> 
5*>^^/^jl«t9t>/jN$V^<©©*iJ^fii[tt, al^Oa2^J-*Dtt§il^M^— 

[0371] H2{C, aljfeOa3jfe^*5»t5jSJ£*i^"7 f — ^{^*tL^SE/-?^y— K<D5*> 

^>^#J^{fi}i^a2^Oa3^^*5(t^iiSM^7 ? -^^tf^T*t^ 0 
[0373] al&<Da3m^53tfZ>MmW^'r— *J2, gT©3o©f- PfrbftW- 

[0374] ( 1 ) a2,&<Da3,£ jo ^^ilMffi^T 2 — ^ 
(2)a2^(DiP^M^T i — ^ 
^al^^j&lC&ttSillSM^r — * 

fSU ±IE© (1) ~ (3) *»e>al^i«)a3/SlC*5tt5il3SM^'7 f — ^f^-T^S^ 
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!^-*(P2h &U 5 al©a2l!:*5it5il3S*l^7 ? — ^(P3)3&»b, al(Oa3tC*3ttS 

\5&f— 9 (P4) dSfhi(t-e#5r ^Sr^LTV ^« 

[0376] PHUfcLT, a3<Z>a4lC*5ttSigiiM^v 5 — * (P5) , a30gpP#*£7uX— * (P6) , & 
tfa2©a3iC*5Jt5jSi&ffi^'7*— * (PI) /Nb. a2<Da4lC:fctt5i§M*&^'7 f — * (P7) 

[0377] ^oT, *|llfeCD^tB05S«!(4i^^"e*>oTb, ^Jffl^g5HC^oV^{*, E14 
[0378] *ljffl#^g51te. aytfa-^^h^- ^3a&^LTfIEI^g4a^-^£^S{f 

)ii^fjEPJicpi-stt^Meit-r?)SElt$iS52a^i-5*^-eS)6o 

[0379] r^T\ -T-<^Hig^fiE^!lEgfl51af±. ^4(DH16<D^«80-r-<>'W(S^iiEW«ISE 
[0380] ^lCO^Mt^i:L-r{i. |iE0J^g4a<DT ? ^/Wl-^{^§|514a^t;®T-Wt* 
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[038i] M2<DWim.mmti,xte, ^mm m^m^n^mxh^xh. mm^-mmsmic 

[0382] sat, m2(Dm^mm^m39^m^^xmm-r^ 0 

[0383] 4\ 2-D(Dmm^mm5ARxf5B^K tti^ti, mmn^jf^zx<o, &&m&<D 

Um^^Mn-r^h^b^. H39^i- a , al, a2, af^lJ/Wilg5A03£^u b 

ttnm% : mmv<D&m&b-fz> 0 af«\ m^mm^x$>^ 0 039^1 

[0384] ^mmmm^^ ^x\t, £i\ mm^-mwsAo&m&a^MisX, af&wmmm 

— <vmmfo&i>mbtiz>(DX\ wm-i. ^4(DmM<Dmm<Db%bm—(Djjm$: 
mmir^biz.x<o, &MMab&m&b(Dmr^M&&fem-tz>z-b&x%z> 0 m^. 

&m&a<D&M&Mz£&mm&o<Dm^iw.v(ow-- get tut, ^mM.a<D^m 
^m^bo^mx^m^^fc^b^m^um^^b^x^^ 0 
[0385] sx±(D&mwiz, 'pt£<bh&wmmRTfmfflmmzmtt*^mmm(c 

PU: Central Processing Unit) , ^n^yiv^f- ?%fcffi^%mife&^}~tZ>RAM(Ra 
ndom Access Memory^^&^fel^S , RtV^ (HD) %?(DWI& 
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[0386] (5-2. isZ&A&lfc) 

. ^^ohm^mmm^^m^xa, m40Rx^m4i^idif^m^m-m2AR 

^a^^T-rtbfi, ^com^mm-t. m40RTfm4icom¥tm~xhtt#). m, 
[0387] <2-3. mm^m^(D^— ^teit^-&> 

[0388] m46te, ^mA^um^tct^m^mu42a{zmm^fv^—^<Dmmm^^i- 
mx&z> 0 m46\z.0;ir£?\z^ teis$i542a^^ x i\mkM^^coh<D, wh. um^ 

[0389] z.<DjjmA[zte\,^xi^ umm^mmmma^m-r^tzm^ isra*&42a_b 
iz.mm.-rz>\m$:Mm^K^ u^^o^y—v, whv—^^Mx., u-</^i&s±(d 
y— vxmmm^wx%%h(D^Mvxte,^<D;-Fzm^ 

[0390] £xti^ ^^iztetf&ummm4a(Dmittm47&m^^xt&mirz> 0 z.c.x\ m4 
7(*. mmmm4a(D^^>bmmiEmmMMmm2aRw^bmmtEm^i / f 

mmia<Dmm$:m1r7v-3--r--bmxfrZ> 0 

, ^^coy-Ktt^aiLmf^^J^^^feili-^^x^^siioia, sno3 
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a) 0 

aizmm.&fttdm?kmttfah%imi-z> (^^rsi 105a) 0 

[0393] ^V^\ §i&m&(DmMc£<9 , l/-</^iJ^±oy— KTWMaffi/^ft^-e^t 

I ett1-£ C^^S 1 1 07a) 0 
[0394] #CV ^\ ttfff^^MM^-^ IIi^f-^©^i(^oT, felt 

^^S1109a) o 

[0395] #cwc\ ff^^^ttttj^^^^L. tmm^mmbKDmmmmAtL-xmm.'r 
-p^&mmfc^&i'E&u mm^mw5ncmm -rs^^/smia, sni3a, 

S1115a) 0 
[0396] (^2(7)^^) 

m2(Djomte. mwmw4atim7kMmttmm.m2a±izmf&-tz>(D-T:te 

[0397] g|48te, ^&B^SffiL/c^^OfeltlH542a^felt$tL5^-^(7)miB§^^i- 

2a{*. W-m^mMi^mimn)423aRxfmmm^-^(iiLmmnRxfmmim^ 
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[0398] ±M2fflg<DX#y?<D5'hs8l<DX?v?fe* ^^^fflV^tlTV^T 2 — 9 

Wik~?foZ> 0 R. Merkle: Secrecy, Authentication, and Public Key Systems, 

UMI Research Press, 1982. <7>36^— h/— K<Df>J ^ T-fit^ft 

^-r^fe^^S'jf H( a , b)^fe^$tL-cv^^, z.(Dwm^m^i^^9 

[0399] J^Tfc, ^5^lc*3»tSSiEW3Sll4©ilif^S:ia49«:fflV^-riJiW-r5o ®49 

sp4iaottiiB^-f-7o— hgi-eat>s 0 

^S1121a, S1123a) c 
125a) o 

[0402] #CW^ if^^^iei*^^#i^it^tp^^^^~^^i<^^^^ 

^^S1129a, S1131a) 0 
[0403] #^T\ W,l<D*?y?\Z.5l% l ;— K-efc§20(D7— K(^fC?t52oCD^7^7V 

— AdS#^Ei-^|»9x i!SR<D2o<ZV— KOftlJiSfcS/- KcO'figtt^irf'J^^ 

S>7°S1133a, S1135a, S1137a, S1139a) 0 ^<D^ W\tz\Z.m 1 <D^9yy~ IzmMZtltc 
it^ni-^^Xy^SlHla, SI 143a) o 

[0404] #:v^ ^^O5pJffi#^e5UJ:*J--t-502(D^5'^^E^rSSi:^<^*fS»^ 
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(^T^X^Sl 145a) 0 

[0405] &i v-e, m&&t&&wM$tmAb^ mmm#mm5i<Dm.M&m£±^xmm-r 

— *£^tfSE9iJ£:g£ffr£U *»JJ3#£ig5lK:^{f "f S(^X^S1147a, SI 149a, 
S1151a)„ 

[0406] ±mbft&m37\z&i-M t fcM&m^x®,w-tz> 0 0f»»^srx4tu-aftwi- 

[0407] £i\ SE^^S4a«f!jffl#^e5I^^aEPJ^*^S:ttSi:, fiEPJM^^JlI^fiJ 
^^^i-S(^^yS1121a, SI 123a) o 

[0408] m^x\ m^m^x4mmw^—^xh^y—m,o)(Dmmw.^mi<D^^^ 

—J*lfrb. J— W0M<DWl^iW.&%Sl<D^y?421a(DX?>y?7U~ J^Ebi&ttl^ 
ftW&~f%> (^X^7°S1125a) 0 

[0409] ^^^-t:\ mmm^Ao^i)(DiiLmmnRxfw\mM^u^y^u—^3^mi^ 

^5 r yy-\z.W)WtZ>{y*Tyy°S\\2la) 0 ^<DU, fffcic^i(D^^^{c:iiAD$tt^ 

MirS (^y7°SU29a, S1131a) 0 
[0410] ^^X\ %\(D^-j^\Z.5tW>/~ KtC^-r^20(D^^^W— J±frfcl£-rZ)(D 
X(*y-yy~7U-J±2Rm) . ^f^O2o(Dy-K(D^^^/c5y-K(l,10)<7){igtf 

tc^yy-yu— K^%fzt^y\^y^y\y— J^2ab\sx:%\<D^y^\z^M-t^ {P^ry 
37°S1133a, S1135a, S1137a, S1139a) 0 ^<D%k, ^xtz.{Z^l(Dy\^^\Z^j]^thtc^ 
y-yy-yU-^tK tt,OflJffl^=glg5HC:}oV vC, W.m&m&'Dffi^-y'lZttfo-r 

^h(Dx^b^i^.m^y^yu—^mm^^mm^mm5i<Dm2(D^y^{zm. 
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^p-t-^(^^S1141a, SI 143a) o 
[0411] &Vv?, ^&<Dfflm&&W5lfctt1rZm2<D^y?frbmin&ffrMX3<D&: 

^^°S1145a) 0 

[0412] rt^^X4^ji:Hij^^^X3^b, mMm^mm5i(DW.m&m£A23ati, 

Ttelti-^<h^t>^,^^^S1125a^t^S1145a^m#LfcipntM^-^^ 
, S1149a, S1151a) 0 

[0413] (m2<Djj&(Dmmm) 

[0414] IH50}-i|iE^^g4a(DfBltfP42a<Z)1t^^-rilI-efc5o Hl50[^:i-J;9^ 

^Ttcoy— KfJ^HtSrfUlLi-S/— Kf"J^Htti-^ffl^^^(J^T-ef*_stack^^ 

*£) RtWiS&fc&^JB"^— ^fll^<Dga^J (^T-e«_chain_comple_data_veci:t^^) £ 
J#0 0 _stack(D^l5f ^^7V- ^k#<5^y^3eT?a>«?x #^^7U- 
AfiplaceaSfcvaluelflS^b&So ^5^placegBf3:JI|I#^&j;fc<£>/— K^Cfi^i - ^ 

CDm-frbt£Z) 0 valuetBfl-ecDy— KOfiJ ^ 'ffi^r^^-f ^ c _chain_comple.data_vecfi 
■X — ^^aechain_comple_data(D@£^IJ"trfc , 9^ '7* — ^1#3schain_coniple_data{ilate_cco 
mple_stackfP, prev_point§P „ prev_point_oldg|$, S.tFold.treejd^Bd^.CSo ^<£>5*>* 1 
ate_ccomple_stackla5«_stackil^il^^5/^> r l/— Aa>kfc5**y**l3e"eS>?K pr 
ev_pointfi5{iEmj<^^®^«i-^lJ#^-(^AS^C*fc^nil) <£r*U prev_point_ 

oid^(*m?t^^*^^M{-^^$tt^^*^^{t§E^^^^%*i-asU 

#-5§- (#^S«fctenil) old_tree jd9Sfiprevj)oint_oldaJ^ n aT?{i/ c (rv ^#p 

[0415] g|51«, liEP^^g4atCiotj-§iS^M^O#)liGET_REQ^^i- 0 d<D^HMt?^ffl 
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[0416] • vote-r v^/i" *f—z mmz^y^m) &&&'fz>mmx»tbz> 0 
[04i7] •idxotemm#mn^$:^i-mm&{£&ir%mi&xfoz> 0 

[0418] •JevO_ptr^^}Clg#ltfc-r-<>Hli^fE0^^5jt^SiiST5y-^^mSlJ#-^^ 
[0419] •placeO{iJllI^^J*(Dy— Ffil^lt^W- ^^-t^^Xh^o 

[0420] -snmO^^^^^l/— A^#i-§^^:-efc^, 0 

[0421] -FCvO^^^Hllf^BJ^^m 

[0422] •_tree_id{i)III^^^7tC(Df^SiJ#-^^«:^i-^)^^r-^fc§ 0 

[0423] • make-stackflm(placeO, V0)«^V— ^place^V^ • x — ^V0£3 1 |&£U place 
OtrplaceSPirLTlS"^ V0%value&kVXh^*?V?7^~- ^T&^mWXh^ 

[0424] • stack bun*fo%mm<D*?y?<DftM&i%&1r^mXfr& 0 

[0425] •handle_chain_comple(idO^ treejdO, idxO, VO, 

prev_pointO, immed_stack_dataO, late_stack.dataO ) 
«\ Jil^^J^OfiSiJ^-treejdO, y — ^Of^SU^idxO, fiJ^T^— ^V0, gPB## 
rcTT— ^immed.stackjdataO^ MMM^rf— ^latej>tack_data0#^1#j$£;ft,5S&IiE 
§^«^^L,flJffl^SiJ#-^id0^oflJffi^^g5i{C(6]{tT^#i--5ll^^^ 
-To 

[0426] IiE0^^g4a^|iE^^^^g{f ^^^^Stttf/c^V^-^-^v 
0, S*#cO^iJ#^^id0^bTr(D^)IIl^l^tl ? m$^(^^rSTl0la~ST117a 

)o 

[0427] H52fi, H51(D#JllGET_REQd^t^U?m$n^. Kffif+^MSl^lllICOM 

p_NODE_vALS£*-r 0 ^<Dmmxmm£rL%^mRxfmm*&T<Dbmxfrz> 0 

[0428] • samm-i^y^U— J^^m^^MiX^^ 
[0429] • placelbte:7V— ^frUgf-f Z^'&XfoZ,* 
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[0430] •idxlbf«^£#y$-r5^2£-Cfc5o 

[0431] •levibttaESfcfefiy^rsasst-efes. 

[0432] -vallbte^v^/V- f—? (Ifli^r>affi) £$:*#T5^iSrT?£>&o 

[0433] • sflmObHLX^y ^71^— ^{fc^l-^^rCfeSo 

[0434] -placeObfi^V— X%Uft-f2> : £WtX*hZ>o 

[0435] •lev0bte&^£{£#1-5^$C-efc5o 

[0436] • levjiwS.t5idxjiwfi^Sc4r(Si^i~5^^:*C*>5o 

[0437] •Hoor(x)i'XmWcx^\mtL-X, x&&tt\,^MJ:<Dm%c$:te'1rMWcVhZ> 0 Zbi^y 

0\Ztt\JX^ flooKx, y) = floor(x/y)t#< 0 Wh, floor(x, y)tex£y-C#lofcl&£> 

[0438] •hash_comb2(val0, valDtilf yh^J-e^$tl^> 20©f^/> • 9*— ^val0^vall^§ I 
»±U valO£:vallM^U gf^<D/N^^P^:(SHAl^)^igffibfc^m^M'ri5 

[0439] E|53^ Bl51(D^jlllGET_REQS.U ? [2l52cD#JlgCOMP_NODE_VALS^^I^t) ? tB 

[0440] -piacete^v— *^j^32E»rc*>9 N s^fe*#y#*7\s—J>&1^1r&W&rZ 

<fe><5o 

[0441] -idt^ffl#IWlJ##*^lE»S^^S^afe-C?*>5. 

[0442] • Nra»»$n^Jffl#^»*fefiy#-t-s^«rc*>5o 

[0443] -auth_node_pl(prev_point, place)tt HI^cU— 7<D8RS l J#^-"CfcS prevjx>int£7V 
— -*place£5l$c£U P laceOfiJSjifi^p r ev_point(DjlMffi^-X— ^^ftS^fTt 
0-efctb{itrue^r$t>^ltn^false^jg1-||^:-efe6o place = 0, 0£Ut£#, auth_ 
node_pl(prev_point, p\a.ce)fihniebf£&t£fc<Di&?B±+'fr£kW\i'3. , floor(prev_point,20# s 
ffl$T?x i = floor(prev_point,2 j )+li:^ ; 5^^'e*> ; 5o 

[0444] ^c{c N m54Rmm56zmmvtetfb. l^M^mm^m^'o , mmmmm^Mi- 
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[0445] 

[0446] 
[0447] 



[0448] 

[0449] 
[0450] 
[0451] 



El 5 5 -CI ^^tc-^y"^— ^>TERMINATE_STREE_SUB 1 1 m 56"C| tiff? 
Zf;V— ^TERMINATE_STREE_SUB2£HtT^ JreejdSrlfcft-fV^y^ 

«m 5 1 -eie^ufc^jii GET_REQ-effl v ^tch<DX*tbZ> 0 

057€:#J$Lft3&S£> % TERMINATE_STREE_SUB10l!j^$r, 4#3£<£>:f£i»{;:KiJLT 

A5tfrte££#*>IWRSJ& s ifcTU TERMINATE_STREE_SUBl&P£T*ffii-:ifcfa£:%x.5 0 
^^OB#^-efi_stackO^S«, hy^bJLTKl, 4), V(l, 4)]£[(3, 0), V(3, 0)]£r 
^tft>0^oTV^ 0 ^11 TERMINATE_STREE_SUB1 J— K (1,5)^(2, 3){C 

(l)^^7 0 ST1211a^i«9, ^Bf^sfinLxbfvlKl, 4), V(l, 4)]^^tL, .stack 

«:[(3, 0), V(3, 0)]<D^#tft<^^S o &l-^X^:/ST1212afCj;9J§j^^place_ 
xbfC(l, 4)#\ idx_xb^4/5^^$^ c 

^5/7°ST1213a-e« idbmb*s«Sfcd^»©3pJSSr-t-S*S^ ^,?£(Didx_xbtf>fi!4te 
^^T?fe-5<D-e x ^^ST1214a^iitf 0 

^■7 1 y^ST1214a-Ctt_stack^nil-e*>5d^^l^-t"S*^ .stacktt nitt*tt&V ^ 
"C-X-T-y^STl 2 1 5a (Cii tf 0 

^^ST1215aT?}*, ^M$Clev_xM;il£^^U val_xbKV(l, 4) Sr^^U idx_ 
lblHl+4 - 5^^i-5 0 place_lbtC(lev_xb, idxjb) = (1, Z.<D 

fitttta (l, 5)asft#j<£>^ — /-K^-To Z.<DWm<n*f* — y— 

yN^v-^it^rl+^i-^BI^ dummyJiashWt^fcU ^^M"9{iS^dum_val_lbtCiS^ 
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lh5o ^bl-sfml.lbt- 

make-stackflm(place_lb, dum_val_lb) = [(1, 5), dum_val_lb] 
-frWfct^ ^-Cmake_stackflmfi/— V(DitWi\nWit^y->^iW.^\W^tL-X^y 
?7U—J±&±j&'fZ)m%ce&Z)o ^^-Cplac_lbi:sfml_lb ^^|^Ci:LTREGISTER.C 
O M PLE_D AT A (053 ^ /E: It L/'C't) <D ) % TOffi"^ 
[0452] jj^V ^T, ^x^7°ST1216atC^oV vT N lev_nwfcl2£:f5i^L* idxjiwi^ floor(idx_xb, 2) 
= iloor(4, 2) = 23r^;£U $^(^place_nw^(2, 2) £ri£)£-t~£>o j^T, val_nwi31ha 
sh_comb2(val.xb, dum_val_lb)^t^^i-^ 0 hash_comb2{*200^N-/->^-'fji:^5l#[i:L 
^;TMb£S^U Bff^^^^^^P^^ffi^'^^^^"t"M^^fc^o sftnLnw 
(Zlmake-stackflni(place_nw, vaLnw^fS^l^ sfinl_nw^r_stacktcl^ !> ^'v / j.i - 6o ^itU^ 
£«9, _stack«[(2, 2), V(2,2)], [(3, 0), V(3, 0)] &^t?Mf&tt£Z> 0 MtCplacejiwisfmL 
nw^5l^[i!LTREGISTER_COMPLE_DATA^I^tJ ? mi~o r^-e^r^STmia^ 

[0453] (2) ^x^7°ST1211a{CdoV ^_stack£lo*V7°U sflm_xb{C[(2, 2), V(2, 2)]£f£ 
^i"5o (r^tLstackcD^tite, K3, 0), V(3, 0)]t^ o ) St-place_xb^(2, 2)£r, idx_ 
xb^2^^-f-§ 0 

[0454] ^^^ST1213a^^V^ridx_xb<DM2^^Ci¥lJ^$^^^^°ST1214a^ii^,_ 
stackfinilTli^V^-e, $^t^^^7°ST1215aiCiitf 0 lev_xb^2^r^^L, val.xb 
(CV(2, 2)£rt§:^b, idx_lMC3£rl£^:U, place.lbi^, 3)£ri£^L, dum_val_lb^dum 
my_hash(DigUii:£l£5£U ^?Xii:£V(2, 3)^^-r o $b^sfinl_lb(- 

make-stackflm(place_lb, dum_val_lb) = [(2, 3), V(2, 3)] 
Zmfe-TZo Z^-CplaceJbtsfmUb^mtVX REGISTERS OMPLE_DATA£Pf 

[0455] MV^T, ^^5/^°ST1216atCjoV^T, lev_nw^3^r^^U, idxjiwtC floor(vaLxb, 2) 
= floor(2, 2) = l^lS^U £iblCplace_nw^(3, 1) £12 £<> i^T, vaLnwfCha 
sh_comb2(val_xb, dum_val_lb)£^^U, w<7)fit^V(3, 1)^#< 0 sfmLnwiCmake-stack 
flm((3, 1), V(3, l))&rl£^L, sf^jw^jstack^^v^-f^o ^tU^J: 1 ^ _stackte[(3, 
1), V(3,l)], [(3, 0), V(3, 0)] $:^t?m&bt£Z>o £^place_nw£sfmUw£3lifc£:LT 
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REGISTER_COMPLE_DATA2rP^ai1- 0 m?^^ST1211a(cM^o 
[0456] (3)^^7°ST1211atCioV^T_stack^lO^V^ ff U, sflm_xb^[(3, 1), V(3, 1)] &JBL 

^i"5o Cstack^flgf*, [(3, 0), V(3, 0)] t^oTV^. placejcbK(3, 1)£ 

K£U idx_xb(ClSr^^i-5o 
[0457] ST1213a{C*5V^Tidx_xb<Dfli[l^l&M5£$H. ST1217afvli§^ lev.xb {^Ix 1 

£U vaI_xbt^V(3, DSrSS^-fSo _stack^^^^°U^V^ 0 $tvfc[(3, 0), V(3, 0)]£sfml 

0b{C^^i~6 o &£>tC place_0bW3, 0)£\ lev_0Md3^ idx_0MC0£ % val_0b(CV(3, 0) 

[0458] ^5/^ST1218a^ioV>T, levjiw^^Bx^U indx_nwt£floor(l, 2) = 0£g8!5£U 
place_nwtC (4, 0)§rtS:^U val.nw^ hash_comb2(V(3,0), Vft.D^Ix^-^o ^©fi 
£rV(4, 0)^i"5 o sftnLnw(v:make-stacknm((4, 0), V(4, 0))^1£^U sfinl. nw^stack 
^^Vzx-i-^o ^#l^J;«9, _stackte[(4,0), V(4, 0)]&^&mf&bt£Z> o £<b^place_n 
w£sfml_nw ^§|#:^bTREGISTER_COMPLE_DATA^P^I>'tiSi"o ^W^^STl 

[0459] (4)^^^ST1211atCjoV^-r, _stack£l O/K^U sflmjcbfC [(4, 0), V(4, 0)]£- 
Bx^-T^o (_stack(7^^^{inil^^oTV ^ 0 )££>tC. place_xb{C(4, 0)£l£^U idx.x 

T1214a(;iii^_stacktenilT-fc£<D-e\ ^y^°ST1219a^S^. 3gUit^V(4 ) 0)£Sx 

£l±(Dffi$k, Z(DmW<DMUm$ ^m(DW!kM%tt(D;V—hWX*-foZ> V(4,0)i& 
'bo 

[0460] lll56l?fe^$tLfc^Vl/— ^>TERMINATE_STREE.SUB2(CoV^T|fePJi- 

[0461] tfaT©ItfcJ;^i^ftffl$^ 0 

[0462] 'mm#mm<vm^xhz#i&mm%:i&w^-zmmd 

•|!!500aMM^ffl^^^<^iH^U_chain_comple_data_vec(0#^^^|W|Dlt3t^ 
Sf-Ochain_comple_data2 
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• #^lttfc f £nil£ifci$1- 5 g£ i£prev_chain_point2 0 
[0463] ^(£TERMINATE_STREE_SUB2£)iM1^ol v 'Clfc§J!li~5o 
[0464] id =0, — , N-l^oV^Tm5607"n^^l^^Ti-5o 
[0465] ^n5/^l<7>^-ef*WT<^Sl^i"5o 

[0466] chain_comple_data2 ^_chain_comple_data_vec[id]^rfiS: St> prev_chain_point2 t-chain 
_comple_data2(7)prev_poinlgB^IS^-t-§ (^7"^7°ST1222a) 0 

[0467] prev_chainj>oint2*Snil-C*>tb^ny^Sri^Ti'5 (^^^ST1223a) 0 

[0468] $t>fti"ttli^ chain_comple_data2(Dprev_point_oldfP^rprev_chain_point2(C, prev_p 
oint^SrniUCl, oldJ;ree^^&<^^i$§^£#*f£^U 2fc ^_chain_comple_d 
ata.vec[id]^chain_comple_data2^S't"S (^X^7°ST1224a) „ 

[0469] <5-4. mm%r^M5UZ&tfZ>'{'y?})?>*/l'7G£i<k> 

[0470] UViW^/WiiBiJ^^ft;) 

[0471] a ^h^mmmmicowmmmM(Dm^(o^mM.x^t^. m&<DMffi$\m 

[0472] ^raHH^^l-. Z<Dtife&1ffijfca&^iZ.&mJZ&&j£<nM&& a(0), a(l), - 
, a(n)i:-r5o (iifif te. a(n) = afT?fc5#\ fM*&to&^&Zb%K^W£tt\<\ ) 

[0473] ®58£#fiBUT\ )li^|t)^^^^)lI^*^^^^-■^V^-CA^^^-t^K-r ; 5o 
[0474] af^S^RO^raiH^fcSirt, af»sy-7#-^(^Sife)Sr^U. afcDHit^m 
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tcjsv^Tttkd), k(2), ■••MmM^^^xi^iL^hiDtir^iim^M^m-io^ftir 

5)„ 058111*31^}*, m = 4£LTW5 0 k(m)J3:0-?t>J;C k(l) > k(2) > k( 

3) > ••• > k(ndbf£ttifti\*t£tt\i\z.<Db%* ±fBMR^JKj7*u^Ki:JRi-5 

n%FB<Z>m&M%)'}^<DV— ~7(Dmt2 k(jl) btj:Z> 0 l358^*5V>Ttt, ST2(l), ST2( 

4) /^JII^j^/>*£^LTl ^ c 

[0475] ^tW^/HBB'J^&ffcfctt* mfeZtltca €= {a(0), a(l), a(n)}(COV^T, £Jt 

TOtmt (1) ~ (3) Srff5c:£-e*>5o 

[0476] (l)a*SM^5»IS^I&/J^ST(^-^fcfe*5)S:W-||Li-5 0 

[0477] (2)jli^^^^W^hfC^VNT±|BSTJ;t)&f^ffii-§lofe2)V^{«icOjll^: 
*^*O/V-h<Dfi]MHfi£,a(0) ( aCnX^Lt^aO-eSimi-^M^-^^ff 

[0478] (3)ST(cldo(tSa<DmfiE^^^authPathST(a)i:*D<i:, authPathST(a) ^Jg-f 

KoSU^teSr, a(0), aCnX&r^aD-c^i-SM^-^d^H-aLi-So 

[0479] 4>?y*>*A4Bwifz&4k<ofe&f&. &Tiz.femttw$fim&MifottM 

[0480] g]59te, m^^JlR^^7|c<ott*ll«SJtt^^lS"e^i-tO-C*>6o £<z>5*>, j£ 

/C7— KT?*>So ^^,£JI&^t|v£CST<^U CSTl^ttSaOSgiE/^^- authP 
athCST(a)i:*D<o ^>^V ^^Bm^^tti^ t§5t£*Lfca e ( a (0), a( 

1), a(n)} {CoV>T, authPathCST(a)tCJSL > Ja^J^fi/^^oTV^/— KC» 
»J^«, a(0), aWCS-t^aOT^t-r^M^^-^Jii^fi-^-rS-^^l^lit-e*? 

•So 
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[0482] i.mistczb&m&z.x \ m2<Dmmmm%mAvtcm38iz.mz>t. g^at^u 



[0483] ^#fL*/i^, ^^y^^/l^^SBUfcOlbfl^oV^T 

[0484] *i\ ®^«^afiD^M^^»^-e^F^Pii^jSi-^^^^a^iom^i-§ 



(^X^^S510a) 



1 ^-T)li^^^^h(-*5V vfM:. 



2 V^18c7)!J — 



7 (/— K(0, 18)) SratLTl ^, 



[0485] 3cfc, S»jfea35SJRi-5ie^^/J^STSrfH|Li-5 (^7 t y^S520a) 0 061 t^i" 
JlI&^^l^MC&^Ttt. mifcfc&mfcMffi'b*<n? i b££fa t b2& g <DST2(2) 

[0486] #cfc, afibfeaOST^jSitS^-jljiaHiE^^/— (^5/7°S530a) 0 

IH6lic^-riiI^^^-^ht-*3V^T«, ^v-rV^;*l9<Dy— ^(7— K(0,19))i: 
i^/i^O-fV^V^SO./— K ( (/— K(2,5)) #iiffi»S£' W— K£:fc5o 

[0487] &mMt&M/**S~Fs<D&n&mJ&&*if^tl&:fe-1rZ> (^^^S540a) „ 

^a^gPBt^^T 2 — atD^CCD^^^al^^t^tb^acDgMtt^-T 2 — ^<£>^ 
[0488] &f&j&aD&5-x.bti1Zb%, ^OauthPathCaO^W^jflV— K(j, s(j))<£>fij MHfiV(j, 

T^oio-efcs/— K(o,i9)©8t##fla^ri, 3»£x3(/— K(o,i8)K mn? 



WO 2006/019143 



PCT/JP2005/0 15085 



101 



^ls?£M. »ft/£X4(>>— K(0,21))^5 o £7c. &mMX3tf-$-7Lbfttcb$, SP 
,&X3(/— K(0,18))i:^ o - 



[0490] ^yys540a^fc&tLtzm%mM&$:hb^, &mms<*/—vs(Dwm 

MfrttWirZ) (^5/^°S550a) o 
[0491] J^±(Cj;i9, ^^a^^tt^^y^^/^^kO^S^^TL, ^<Dfr^f£ 
mSrffl^-C, ^^a(D#J^«-^tf A^»f^SH^^iy^M#:^fflL, V(roo 

[0492] (-r^^y^^/^gij^^t:^^^) 

[0493] *i\ /II^A^/J^ST^^-t-5f+m#)llFOREST_SST?rlll62^^-ro Ztlit. 
[0494] ^(D^)II^ffl$tL§^#:^^M^:tt^T^^^«9-e*>§ 0 



[0495] -AtitisXtt, ^—-ymm^m^mm . 

•^IfrirLTte, #ASIfc£{£^1-5«rest, ht, leafnum 
•^ffl^tLSM^^LT, log (x)«, log (x)WT©t^©lt, expt(x, y)te, x(7>y: 

2 2 

-C0T7^yX^{i, y-^»JT-a(#AS^C)i:®^«^^mSiJ^ fin 

iglj^-start mfk^m k~%rj5\Z{iLW:-tZ>V — ^CDf&SUT-last (§£A») ©It 
^fttl^J-t-^O-efc^o ^%%(D\m?kMJfo'hfcST(Dy— -7(Dm^ last - start + ltf£<9 
, Sf£Ojli&^VJv|^i^£te, log (last- start + l)bts:& 0 

2 

[0496] @61-e^LfcJ:fls:f!j^oV^, m62<Dmm&mm-rZ>t£XT(D£ylZfj:Z> 0 !J— 7 
»JT-a^l8<b^3^, ®^^cD^iJ^-fin^26i*D< 0 ^CD£# N 062<£>^jll{c:$£ 



CD 
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[0497] ^V^y^>-^/^^b^^it5BfiE/W-KSiJaffiO^##BS^^# 
!lllDECIDE_GET_POINT_A^H63^^i- 0 r<£>3MSft\ If ^^c^J&M^Ojg 

[0498] ®64te N ^Jl|IDECIDE_GET_POINT_A^CjoV^-C^t)tt?)'7 ^ — ^1tit^^^C(D— 
§*^'t"o 'T 1 — ^^iachaindata("±leafjndex§P^ rgt_value£ft % immediately late£$fi*h 

[0499] ^(D^mx^m£ti%^(Dm<D^mRxfmm^T(Dbte^fo^ 

[0500] • ^#[chiandata_store{i^*#:^SMcDE^J-t:\ Ifi^lJO^H^'X — ^^5g c haindat 
[0501] • chaindataO^x — ^«atchaindata^{*:^Fi-^>^^:-t?fe^ 0 

[0502] -aom\M^m^(Dv—^m^ii^mirmm^ni-^mxh^ 0 

[0503] •JlI^A^Ttv^)/— K(j,i)^*tt-"t, subTreeO', i)te(j, hi:-T^J:5^)lR^ 

[0504] •)HI^^^*<D§C5>7fcST{C>?j-U-C, leafs(ST)«ST<DU-^(D^^^^-r o % 1 

eafs(subTreeO", D)te§G#*subTree(j, Q<DV— 7(DM&XhZ> 0 height(ST) fiST 

[0505] H63^^i->r^y^^/^^k©»iiE/w— w^ie«>^##fla^* 

^¥)HI (DECIDE_GET_POINT_A) <DT/V=f<jXA(D;|g$l£rl2|65 ^-Mg^^ffc 

[0506] rd-e. af^W3£^^ti-5«^S^7*W^hrtOJli^^/J^^5^aO*SJSi- 

t(D^STt*D< (aO G leafs(ST)) 0 
[0507] 3ifc. STrt©aO<DfBtE^£authPathST(aO)£:j3#, 

authPathST(aO) = [(0, s(0)), (1, s(D), — , (k -1, s(k -1))] 
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gP*?, k = height(ST) Q 0^mWCn, ml^LT, [n-m]^n^_hT*mi^T 

[0508] #j e= [0 ••• k-l]^*fbT, 0, sQ))^ W^^OM^T^-^^^f+^-e^^^^ 

[0509] rtPathST(aO)^ST^*3ft-5a(D/^— h-z^^^jot, 

rtPathST(aO) = [(0, r(0)), (1, KD), (k-1, r(k-l)), (k, r(k))] 
iri-^o KO) = aO , root(ST) = (k, r(k)) X*tbZ> a j e [0-"k-l]irf-5 o 
[0510] (l)O', rGWG'+l, rO+l))tf>left-child"Cfc5£# 

s(j) = rO)+l Xfo<9, 0. s(j))J*(j+l, r(j+l))^>right-child-efc^ 0 leafs(subTree(j, r(j))) 

[0511] (l-l)al af<Db% 

a.l(D&.<D%£#Z&&L&&a2bW<(ail * afXfef&^(DX^<D£?fj;a2&feZ) 0 a2 ^ af 

)o 

[0512] (1 - 1 - 1) a2 e leafs(subTree(j, s(j)))(£>£t 

leafsCsubTreeO", s(S>))fcfcir5m&&ffrj&X'Mi>ftfc{&mirZh<0&&Z kW<<> 
[0513] (1-1-1- l)a3 = last(leafs(subTree(j, s(j»)X&Z>bt (065 (a) &#J8) 

fiPB^MTt-r— ^immedData(a3)tt, subTreeO, sO'))t-*5(tSa3(D^^M^^— ^cm 
pltData(subTree(j, s(j)), a3)£«a"£p 0 t^oT, 
immedData(a3) h V(j, s(j)) 

ts.xf- yw:, x frhYmmx%z>^tzmi- 0 ) 

[0514] (1-1-1- 2) a3 last(leafs(subTree(j, s(j)))"Cfe^>i:# 

(i-i-i-2-i) a3 * a re&z>b$m6s(b)&mM) 

a3<Dlk(D^$i&m.&&a4bW<o (a3 af%<OT N w(D «fc5fca43&S#>5 0 a4 ^ af Q a4 

a30a4{c£5SSfiL&01^/H£j'£i-5£\ j" ^ j+1 
fi£oT, Jli^*^^:(DttMiCi<9, V(j, s(j)){ia3T*ll#-r5gPB#ffi^^— ft, a4X 
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immedData(a3) U lateData(a3,a4) h VO, s(j)) 
(f^, a^ra3<Da4^«tSISIiE^^i-5i:, immedData(a4)lC«V(a)^AoTV^^, 

^vG, s(j)) i!^iPS^>^v^r^^a£Si-^^^^fc ; 5o ) 

Z<Dk%, V(j, s(j))0^i##M^^a3. 5t#^$^^iSra4tL-CJ:V \ a3 ^ att^Oa 
4 ^ aTCfcSo 

[0515] (1 -1- 1-2-2) a3 = afCfc^^f (El65(c)£#Hg) 

[0516] iot, STfSG, s(j))^tf^^{**tv^ ftoT£©j;5fci&^tt*>0#&v\, 

[0517] (1 - 1 - 2) a2 G leafs(subTree(j, s(j)))t?«^V (EI65 (d) 3r#W0 

V(j, s(j)) e lateData(al, a2)-C$>5 0 
[0518] V(j, sG))^##f^^al , V(j, sG))^&#^^^£&a2tLTJ;V \ 
[0519] al ^ atfPOa2 ^ af 

(l-2)al = an?fc^»^(IH65(e)^#:^) 0 
[0520] ^<Db£. af&Wfemiffig^Znmffi^^^hft^Q, sijmilt&W&Mffi'b 

[0521] ioT, STfiO, sa))^t^^i^V\ t^o-C, r<7)±5&^te&9#ftV \ 
[0522] (2) 0, r(j))^(j+l, r(j+l))^right-child-efc§t^ (B165 (f) £r#$0 

rG) = sG)+l-efc»9, G, s(j))«(j+l, r(j+D)01eft-child-Cfe^o 
[0523] V(j, sG)) e immedData(a) 

VO, s(j))(Dm%0M&&£X$^?^>?&&&^OtVX£\;\ a0^ af 

(DECIDE_GET_POINT.A) fct, 1-^T<D^5>tt£%JtUfc^Ji|I^o 

[0524] ifcfcl, ^l^Sa^^tl^C^ ^authPath(a)^m£l^/H?V-KG, 
aGXX^fW^TjitVG, a(j))^lt#-r^#Hi COMPLETION_SUBl?rlll66tc:^i-(mU 
, 0 ^ j < kTktt)li^S^7|vOi^$) 0 E]70(^X;y:/S550a£'t'>i>raB;3 
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[0525] ^<D^m^&m£tiz&m&TfMm$£iT(Dbmx*hz> 0 

[0526] • chaindataO^t^chaindatal fix — *18^chaindata£{&^i-;5^$irefc5 0 

[0527] -immedDatal^mateDatal^x— ^5tstackflmOi^By^h^i^i--5^^-efe 

[0528] • chaindata.storete ^ &<DM%)M Rfl fc*5tt5 * t3L*5V ^TIE W Jfc^ t LT^ 

« Lfcx— ^^^-r^BE^JT-fc^o E#I<E>#^W\ g|64-r^SL/cchaindata<D 

«t^so 0 ^cosB^j<7)i# s commit, %m(Dmmmm^istfz>mB(D&m&<D 

[0529] (l)#^Jl|Ite2o<D3l&(A;fc)£t>*>, Hl<£>§I^C&IEJlJ chaindata_store<7>index 

Sr^-TMciOiU ^2<D3lictrMg^^*OU^<^^i-lE^i-5 (^^7°S55 
01a) o 

[0530] (2) ^/5f^#:chaindata0^chaindata_store[iO]^^^L(^^S5502a) , ^gff^ 
^aO£chaindatal<Z>leaf_indexgfli:L {^y^SttOZfi) % ^^al tCauthPath(aO)(Dl/^< 
A-j<7)/— KOindex^^f'5 (^x^S5504a) o 

[0531] (3) m63^HBa£<Z>f&aE^/— K?W^ffl[©5l##fla^^li DECIDE_POINT_ 
AiC^^va, a(j))<Z)^##fiS,^a2(^*S^(Dlor% ttfo^nbfrtzM&mfE 
T-ffrtb, V(j, a(j))^f+^-e^^»)^^i-§(^X^S5505a) o 

[0532] (4) Ifi?lJchaindata_store3r#?^tU leafjndex§P*Sa2'C*>5«t5*SB^J^^<©indexi: 
^SS^CilSr^:3£-rS (^^^7°S5506a) o 

[0533] (5) ^^chaindatal ^chaindataj>tore[il]£|£^i-£(;^.y:/S5507a) o 

[0534] (6) S£^Crgt_vall {Cchaindatal<7)rgt_val$|5£\ ^^CimmedDatal chaindatalOimme 
diateg&£r, ^#ClateDatal^chaindatal<01ate$P$r, ^^-^5 (^^7°S5508a) o 

(7)rgt_vall N immedDatal, hZ>\, MtlateDataHCplace^^O, aD&fe&X^y^U 

[0535] (7-l)-^*tLttii, -eoffiSrig-f-U^y^SSSlOaJo 
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[0536] (7-2)-££*l/<£V^#teu immedDatalirlateDatal/6^, ^Wi^St^XtiW- 

[0537] (7-2-1) i.mximumwzntz.mv mxmz. va &(sM^^ti^^m^-r 

S(^^yS5512a) 0 
[0538] (7-2-l-l)^T^tL«\ ^(Djfi£3M-r (^y:/S5513a) 0 
[0539] (7-2-l-2)^*ttW^«\ irT3 (*^:7 0 S5514a) 0 

[0540] m67\* s m#&&tJ&rifil*z.btl1tb%. ^(©authPathC^t^StbSl^^/W^— 

KO, a(i))©W«J ^ TfllVa a(j))(Dy7h 

[V(0, a(0)), V(l, a(D), V(k-1, a(k-l))] 

SrfHt-f-5#iecOMPLETION_SUBlSr^i-«aU, 0 ^ j < k^kfcHII#c£l#J7tc<£> 

[0541] •k^rJiB^^j^oi^^t-r^o 

[0542] ■auth_node_vals{*S$kOgB^J-C\ ^IB^J^^i^^y^it^^-f-^^ir-f-^o 
[0543] H66<DCOMPLETION_SUBl^#j (0^j<k)togfflU authPath(a) fcJSi - 

KOlH^flGDSrthllLU f+#^^^auth_node_vals[j](c:^^-r?) (^^7°S552 
3a, S5524a) 0 

[0544] authjiodejvdsSrigOIEirU *£T-f5 (7^^7°S5525a) 0 

[0545] (^^y^^/v— S^^k) 

^mm^±it^x^$in^^hcotm^-^-m\^xtm-i-^t^, 4^?v* 

[0546] &Wy9r\>— ffi^-fktt. ±3j&L^^k«E ( S.*Q!a«rfflV^£JlT<^#lill^«t 
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[0547] (l)a(0), a(n)§\ &Z>MmflSLmizmirZ> s fc^flJffl#^g5I^«fcS— 

[0548] (2mm^mm5\^£%dn)(Dfr<D&m&&afb-tZ> 0 af{*ii#^-CfcoT^ctVN 0 
[0549] (3)EI68-eiE^bfc^JllCOMPLETION_BULK_BACKWARDllC e t«9, #a = a(n), 

— , a(0)£. Z.<DW\Z.^W^9>V^^\\&'ttZ) 0 
[0550] ^(D^miZXV^ #SS^ia(n-i)«IU=0 ) n)^MLTaf£|^3M,££Uc^§ 

*9^£tiz>(m69Rum7o&^m)o wr-e«, ffim^c^a(o), a (n)^*a<Djii 

[0551] i=0, — , ntCOV^T, ^lllCOMPLETION.BULK.BACKWARDHCt^iiAp^tLfct 

(n-0OST2(£:&tf3^T<7)fgiIE^W-R^ 
[0552] (l)'jf^&(D-<-^ 

i=0<Di:t£r%;i5 o r<D£^\ a(n-i) = a(n)-e£>5 0 ^JUlCOMPLETION_BULK_B 
ACKWARDli£j;<9, a(n)(C^fLT«afcD^^^ao^TBt^JCjo}t^>a(n)(Dil@ii 
^M^T^— ^^^^$^§(121680^^^850033)0 af<D&m%±M<DmT 
Bt^JC^V ^-C^HH^CA^/J^O^— Mfittffit^U-CV ^JlRCOMPLETION. 
BULK_BACKWARD1 lC£V)&to&Kfci><D&^& a^Oil^M^^— ^t, a(n)-^ 

[0553] (2)'j§^^7° 

il e {0, n-l}i:U i = il£Lfct£\ ^HiCOMPLETION_BULK_BACKWARD 
1 K X <9 m\i £ thfch (D fr£ tPa(n - i)(DmmW^— ?b % a(n - O-e^ft Lfc 
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[0554] a2 = a(n-il), al = a(n-(il + l))t *5#, al<Da2^<t^^|iE^^r AP(al, a2), ^<D 

K^AP'(al, a2). £b&-AP(al, a2)(Dlx-<^jl^g< (El70^#m) o 
[0555] ^T-C^^]II^ft^*(75l4M{Cj;«9, )II^^/J^ST2(C*5tt5al^>ST2^jo 
(t^BfiE/^y— K(D9^»^-^/^^jlJ: l 9/J^»/^(7)Slj^{ii:tt > U68(7)^X^^ ,> S5004a 

[0556] al^ST2^^(t^liE^^y— K^^^l/^^^jl^^LV^OOfil^jii^, 068 

(Z)^^S5007a^^oV^-riiAD$tt§7 =? — ^(C^tLSo 
[0557] al<DST2^:&tf;5§EiiE'"W— KO^^^/V^jli^^V^OOfiJ^jii:^, 068 

(7)^^^ P S5008a^^:4oV^-C^D^tL§T ^ — ^^*tL?>o 
[0558] tJUi^J;^ ^)lllC0MPLETI0N_BULK_BACKWARDl{Cj;«9ii^n$tb^: , bO^r'atf 

al = a(n-(i + l)K>i§3£M^— ^ta(n-(i+ l))T^lf L^SPBtM^-^^^ 
a(n-(i+ D)(DST2(c:jott^)^Tc7)^|jE/ W-K<DfiJ^ffi^ti>^^^^, 

[0559] ^±(1)^.^(2) ^i<9, i = 0, n tCOV^T, #HIMCOMPLETION_BULK_BACK 
WARD 1 <9&1J\\£tltch<7)&^ a(n - i)©IIi^T r — *k » a(n - OT^f Ut 

[0560] &3o, PI«©*|J|ftife^«t»), m68O^^7°S5006a-e¥U^m^ NO ^7 

[0561] O^o^J^fb) 

±m<Dmm^r— *&i\-wm<D^v ^m^ts-^k^x^ *m&\a-z. &r©* 

$fWtZ>Z.kfrX%Z> 0 
[0562] ±fE£>ff^te, ^ T<D^ry^ ( 1) - (5) t irfTfciiSo 
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[0563] (i)fo%m$mm^&5mm#mmi^mistcm^-?<Dyibfrh, 
[0564] T$$\$mm-rz>tc#><Dg*fctL,x, m^mmtttiEmmmzmfeu &m&o 

M\zm^xte, -r^v^ ofrhiotix&h^^Mm\<\&x^£tLX\s^)frb, 

m 3 1 1 « mf—^mm^x^ ^ 0 

[0565] (2)^^0^>^V^^p^p H ^|^yj^-^ (D ^ v ^^^ mTv ^ 
[0566] IH72^-r*W!j^*5V^T«, m$\%&tii^—?(Dl&B <D4^ : ry?*0t2& 

^5£3# § ^>^V^10tC^mfc-('V'r^^^o^^^^i6^2(D^^f 
[0567] (3) Jiffi (2) l?«^fLfc#^0f 7*— ^O^^fx-^^S^^ifi-r^,^ 

,&a(Co<^T, a(DaHc:J;5MfiE^^AP(a, aD^Lfctt, a£>§gfiE/^y— K<Dcp-C\ le 
vel(AP(a, alM^V^^/VO^^LT^ ^0#JS»tf ^-r5r<b^-et5 0 
$<b^ ^^fiJ^jt^H-^-et^aO^liE/W— KOfiJ^jii^, a<OS£fiE^W— K 
(D5^al(D^g|^||.TU/cB#^^fiJ^{t^^^oTV^^^T^A/TV>^ 0 gp*> 

[0569] IU72{^i- e.^di-^V^f^. ^OJ^t 2 '— ?(Dmf$T7K^k<D%imK£'0. 4> 

T^^ofr&m&vmmffi^-ztLx, y—m, o), (2, d cot^ie^n-^ 
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[0570] CO^B»f^^^Mi"^^^^^9^S:tef-^ffii~^^{*^^xV^5C>^^ 

&Xh<Q^tl%albW<b, r(D^BffT : -^^jli-^#^^a{CoV^T, level(AP(a, 

^O^Mtk^-fS^ AP(a, al) te(3, 0)-efc*9, aOfEfiE^-W— K(D?^>W</1^3J; 
(9/Jn^V^(D(0, 0), (1, 0), (2, l)(7)fi|^«f+#-e#5o aOal^&ttSilM^i^^ 
— *f*(l, 0), (2, l)0#J^|ft-C*)50-e % alB#^JC^oft?)il^M^7 s -^fif+^"e 

[0571] (4)±m(3)<Dfam<D%i^ Ppg^ltttW^— ^OB»|fe52o<D^»^al^a2tc:oV> 
T, al(Da2B#^J^}t§«M^X-^^#i-6^t^tB5(5§ 0 r©f- ^fflV^ 

Xm^(DmVft%7E,'£Ak<DM>fr~^ COMPLETION_MAINl£igfflU H93l#tt 

[0572] 074-e^i-^ft:^IJ3:*3V^tt, j m\*#tt&7—9V»0*fy9™, 1, 2<£>3£®uk 

^o^v^v^o^^^^^msE^^^y— kh: (o, o), (i, i), (2, i), (3, i), (4, ire 
[0573] (5) _hte o) ^m&vizmffift±it£fritm&r i r—*<D&* b, ±te (4) xmj&v 

o 

[0574] mm i r—*<DJtt$e.&{b<D^m\z. m\^<fesxT<Dm<9xfoz> 0 

[0575] (5— D'h^MBx'T — ■^(D^M.M^a.QS), a(l), a(n) = a\birZ>b%^ al(D^X(D 

SBfliE/W— Kfl>«MHKtt, :*-rs>:/(4)-etHS^-C*>5o ;i*vSr, 
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v(o), v(i), v(k-i) hrt^ a 

[0576] (5-2)«ot, al<D/l—h/^(CJli-S^-7-KOflJ^mtf^T-#6o 

v'(o), v*(D, v'(k-i), V(k) irTSo 

[0577] (5-3) £-a = a(0), a(n-l)|Co^T, a<Z>altCJ:S»SEj£&AP(a, al)£U kl 
= level(AP(a, a(n))£:fe< 0 

[0578] (5-4)^x^(3) (U;«9, aCOfgfiE^/— Kc09^1/^/]^SklJ:9/>£l^COCOi>J 
[0579] (5-5) *fc, W^/l^klCOaCOfglE/xX/— KtealCO/V— h^^^Mi~S/— K"CU 

^</^Skl<Dt>o^— Srl"5 0 ££oT, ;LCOJ;5&f&IE'W-Rco#m{j4J3:, -LIB (5 
- 2) -WmUtV'(kl)t&5„ 
[0580] (5-6)kl < j < kirftSjlCOV vr, aCOggfiEX;*/— KCD^l^^j&Sjo^o}^ a 

co#j mm~i, ±ie (5-D -cff-mu/cvo-efcSo 

[0581] £U:, (5-l)~(5-6)(Ci«9, # a = a(0), a(n- D^ol^TaCO^TCOfgfjE^ 

[0582] El72-e^-r ^fl^fcloV vCgrfctf x ^yfy^2(DS^ (J>— :73fcBiJ#-J§-5) CO 
HHfiE'W-KW:, (0, 4), (1, 3), (2, 0), (3, 1), (4, 1) X»&% 0 *fcal«MVxV**5 
©»ft^(y-7«giJ#-§-ll)i:i-5i:, AP(a, al) = (3, 0)-Cfc^ kl - level(AP(a, a 
D) = 3-Vh% 0 aC0^BE/^7— Rco^l^/l^kl = 3«tt)/h$V^(0, 4), (1, 3), (2, 
0)^oV>Ttt^rtL^cofiJ^««, ±ffi^^(5-3)-eti-m-r#5(El72, 075# 

J&) 0 i/^/i^ki = 3comiiE^^y— K(3, i)co#J^fiS^(5-2)-etf-^-tr#-5( 

074, E175#BSJ 0 U^/^kl = 3iO±#VK4, 1)^01^^X^(5-1 

)"etf-3¥"e#5(ia74 % H75#M) 0 

^±co^x^(D~ (5) <D¥miz.&9 . &'&vtcmwm<D$E&.4k&ft*>izit>iz, m 

Nbi~Z>b, (N/m)+m = 2»V~N£#9, ^^^D^aco^-— ^SrNj^WNfc&iJgc 
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[0583] <5-5. mm^mm\<Dm%^~-?\z.£.z>^—um\%> 

^-T(l)~(5) (^i-#)li^J;i9, ^|g(^^rHl^llI^»7KO^--h^f l J^fiI 

[0585] ^-r^mm^f-^n, mm^m^-^tmm^^-^h^ 0 ipb#m 

[0586] fl&^ML&^oV^T. ^<D^^ME^^— ^fc^m^tt^— ^112: 

aiStffRP(i), LR^T(i), #J^{fiH(i)) mU i =1, -, n) 
fcU te»W«P0t^*ix5W^/Ht«*level(P(D)^i"i:, 23HHB#<<tt 
leveKP(D), — , leveKP(n)) 

[0587] ^gtf^^lO(D^^7K^^^^l/^/V(#Afi^^^^)^^^/^rt^> 

[0588] ni76{* s ^±mm^^— ^^x^m^Mm^fD/v— vm-mm^m*^?* 
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a, S3102a, S3103a, S3104a, S3105a, S3106a) o 

htlX\^b^\^ abbfD&MMfr/— KR(6) % a<DMwi3fIfIL&3V-KR(5)^;50 

t\ ^»^a^^t+#$ti.^iiE^R(5)(Dji:^, mm&.bmmffijBv*— 

[0590] g]77te, IE!78<7)J:5(-1i^cD|II^^7|c^y>^$^ c ^ {c ^v^, lo<D)l|I#: 
[0591] rCT% >V— hR(n-l)fi N Hi^^*ST(n- l)i!llH^^^ST(n){^*il-r^/-K 

W<Mf$g(L, TID(n-l), k(n-D) 
lx^</K^]index 0 

{igff^((L, TID(n-l), k(n-l)), 0) 

[0592] £fc, §|3^7KSTl(n)0/l— hRl(n)«U 
W<Mf$&(R, TID(n-l), kl(n)) 
W</K*Iindex 1 

WMR, TID(n-l), kl(n)), 1) 
-e$>«9, kl(n)fiSTKn) <Dm&XfrZ> a 

[0593] £fc, lH3^-7tcSTl(n)^MbT^, /I— h Rl(n)a^tfV-R^oV^f2, 
l^MffRCR, TID(n), j) 
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FRl(n)£Afl*0V— K©#Mr #tt((R, TID(n), j), i) "C&£o 
[0594] r^T% j, i»^A«»TX»fc9Jeafe(STl(n))©#S*^«til«W:((R, TID(n), 0), i 

[0595] £fc, R(n)ttNl^^*ST(n)tST(n+l){C*iii- 2>y— K-C, 
W</Mt#(L, TID(n), k(n)) 
W^/K^index 0 

<fcStff# ((L, TID(n), k(n)), 0)(ffl.U k(n) - kKiO+lirTS) 
$JMHttV(R(n)) = h(V(R(n-l)) || V(Rl(n))) 

*7t, HIS^^/jN7KSTl(n)^/V— hR(n-lX /V-hR(n)/^&5-#7*:£ST(n)£# 

root(ST(n)) = R(n), 
leftChild(R(n)) = R(n-l), 
rightChild(R(n)) = Rl(n) 0 
[0596] g O^fflra ^^-r§)IIR^^j7fcttST(n)-Cfc§ 0 

[0597] fib, n = O^LTte, R(n- l)OffcbW3fr£<0lWM$ «t£fo/c/— KlR&JB V ^ 
(H78#9S) 0 IRCOiiLmmWML, -1, 0), 0) -C&5„ 

[0598] r<D£€\ 2ocd 1£36^/H*#^>IBI©JW 5 < <£#c<£>£5^tti- ; 5o 

[0599] Vjl, j'2, Tl, T2 ^ 0 [(R, T2, j2) < < (L, Tl, jl)] , 

Vjl, j2, Tl, T2 ^ 0 [Tl < T2 => (L, Tl, jl) < < (L, T2, j2XU 
Vjl, j2, Tl ^ 0 [jl < j2 => (R, Tl, jl) << (R, Tl, j2)] 0 

[0602] <Sfc«ttf#((R, 10, 0), 5) ©y— Kfc*JVC, HPISMS^T*— 
[(((L, 9, k(9)), 0), L, V(R(9))), 
(((R, 10, 2), 0) , L, V((R, 10, 2), 0)), 
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(((R, 10, 0), 4), L, V((R, 10, 0), 4))] 
bftZo --"C(R, 10, 2)< < (L, 9, 10) -C*>5 0 
[0603] ilffitt^T 5 — ^tt, [(((R, 10, 1), 3), R, V((R, 10, 1), 3))] 

[0604] (l)BPI^M^— ^©#5*ttL^S:i*0^^^3iy^i-5 ~> 

[(((L, 9, k(9)), 0), L, V(R(9))), 
(((R, 10, 2), 0), L, V((R, 10, 2), 0)), 
(((R, 10, 0), 4), L, V((R, 10, 0), 4)), 
(((R, 10, 1), 3), R, V((R, 10, 1), 3))] 

[0605] (4) &Wr&m<Dip\Z, W</H*#j&SfcV ^k&ttmrtZ> ^ 

K((R, 10, 0), 4), L, V((R, 10, 0), 4)), 
(((R, 10, 1), 3), R, V((R, 10, 1), 3)), 
(((R, 10, 2), 0), L, V((R, 10, 2), 0)), 
(((L, 9, k(9)), 0), L, V(R(9)))] 

[0606] (6)^^y°(5)»y-h(D^m^ 

0(0), LR(0), V(0)), O(k-l), LR(k-l), V(k-l)) 

W(0), W(l), W(k-l), W(k) 

[0607] (i) W(0) = V(0) 

(ii)LR(j) = L0>£# % W(j+1) = h(V(j) || W(j)) 
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LR(j) = R <Db%. W(j+D = h(W(j) II V(j)) 

[0608] W(0) = V((R, 10, 0), 5), 

W(l) = h(V((R, 10, 0), 4) || V((R, 10, 0), 5) ), 

W(2) = h(W(l) || V((R, 10, 1), 3)), 

W(3) = h(V((R, 10, 2), 0) || W(2)), 

W(4) - h(V(R(9)) || W(3)) 
bteZ> 0 W(3) = V(R1(10)), W(4) = V(R(l0))XfoZ> o 
[0609] tot, m5(DmM(Dmm^^hmf^MiEm^^^200a^tlii. 3t4<DH; 

[0610] *fc, agg^^sSl-ft, V— ^V^M^Xfc9t>, BEWJS^^—*** 5 ^ 

[0611] fijffl^^esit^^tts^^y^^/^^b^ai^v^-rtjs fig'J^fete 
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[0612] imikm^mmmrmz^^xn, mm&mmsuz. -r^y^^v^ 

[0613] *^0J<O^ife^^oVNTIft0JLT^c^, ^mjKDwwtzmmisfo 

[0614] ^Jffi^s2ixfi5ni, -£B#p B ip^PR^Tiftj^ mmmmiaxn^mm 

[0615] <JlR^^)7fc<D'|4K> 

[0616] HS&^Tfcoy-^-^oV^ i-eMJ$tL^jllI^^(7)!J-^tz:jig^SiJ^ 



[0617] 4\ ¥^flJffl#^S, 



£U i0£il£ri0 < il^Zlo(D)i|S^^^cy 



^7#^L.round(iO){C^oV^T¥«S:S|E0J#^{fL, ^ «round(il)(C*5V vf 
[0618] (D^fjE^OfJ^fitfi, gpt>y— K(0, il)OgpB#M^r-^^^tv5 0 
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[0619] (2) ±§SMmM.W, i*)i*3#, round(jl)^TB#^y-7(0, iO)^JSi" 5>K2fe^^J 
/J^^ST2^U, (0, iO)<7)ST2(£:&tf6)IPlE/^£authPathST2(0, i0))i:bfci:i\ auth 

PathST2(0, iO))^JR-TSy-KT% ^/V^j'i'J/J^V^t^i'SS'J^flStt. K 

(0, iO)^^-r^^^^KT*S:aiIEK#^SabfcfiJffl#^, 7-K(0, 

[0620] BP*,, il ^ i2b-t%bs authPathST2(0, i0))&£jR1-£/— KT\ WWi&Sj' £9/h£V v*> 
(DtC^fi-SfiJ^'fiittix immedData(iO)fo6V^21ateData(iO, i2)^**x£ 0 

[0621] (3)ST2lC*3TOy— 7(0, iO)<D/V— |w^£TtPathST2(0, i0)i:Lfc£§\ _hfBf&SE 
^<D#J ^ {g^TJ ? ^rtPathST2(0, iO)JR^5/—K^-<^* s K»liE^^>V'^^<t9 / J N 

$vV-K©S(i1ltt, K(0, iO-eSaSEM»4rS3ftb^iJffl#^ % y-K(0, il) 
^^i-^^7^KWI^^^v^Tg^fi-§«ffi^x-^*5<i:tJ ^ /-K(o > iO)-egf§ 

[0622] (t£5ftf>ra) 

[0623] (l)if , 3gg (D^ov ^TEI80, EI8l£:JBvv>o|ft931~So 

[0624] (*t^l)&&J^ !D80^#HgL-r, i0til^ii^(c*3itSKS2k^7*^M*3O 

io(Z))iii^^/j^sT2{cjii-^^^#x.s 0 rr-e, -^SE^Sra, 0. ^^h- 

^^/VK^&£ML&£ (j\ i')t*5< 0 K(0, il)<Dl«^/h7KST2t^t£ 
/V— W-v*rtPathST2(0, iDKL&V^T, (0, iD^^ttS^LT, ^^J-M^iSbijO/ 
— KSr(T, O£:*5<o ro^t, KSLfittt^ (f , H ©fei^fcS. t£oT, mfflE^ 

*authPathTST2(il)<£>3£Sd^ (0", O, L)tt>>— K(0, il^STCfcfcttSWSE'W!: 
^th*> 0 /— KQ', i')^{fi^#J^-C{t, round(il)£«9iiff»TL-tV^ 0 «fc 
oT> (0", O, L, VO', i'))tt(0, il)^^-r^iPB##^-^{^*^o 
[0625] (*&^2)^lC, [H8l£#BgLT, i0aid s ilNf^t-*3it5«1^^7*^hrt©ir 
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tt-fZ>Bm$i^'f—?(D'j£miZ.£<0. V(root(ST2'))te, &0tM(!D, il)£*H-5SPB# 

[0626] (2)^{C^g (2)f3loV>TEl827!;M85^ffl^oota0J-r5o 

^hF ( 1(DlO(D|III^^/jN7|vST2^m-t-^«^^#^o 
[0628] k = height(ST2)^jo< 0 

[0629] (j', i') f4/— K (0, iO) (DA — }wxXrtPathST2(0, i0)^£tv5 o 

rtPathST2(0, iO) = [(0, r(0)), •», (f, r(j')), (f + 1, Kj' + D), -, (k, Kk»] 

t-f&o authPathST2(0, iQ)(Dm^X*. ip'h&V V— K^&t)^ 

[(0, s(0)), -, G"-i, s(j'-D)] 

£*3<o #jl e [0..j'-l]K:*j-L-C, V(jl, rOl))d s immedData(iO)fc5VM±lateData(iO, i 

2) tt*ti5^i^t«iv^ 

[0630] authPathST2(0, iO)<D^m^M. authPathST2(0, iO)<Dl^/HK^3lf p2 = (jl. s( 
jl))H. rtPathST2(0, iO))OW</Hl + KD^5?tp3 = (jl+1, Kjl+l))£>7>f h-^-W/V 

[0631] (#^l-l)p2^ p 3cr)^h-^-^/VK-t?fe?>^, 082^^5^, p2(D#J^ffi 
V(p2)tt,il ^ i2*5i2^*5V^, ^^m-Ct^^M^-^lateDataGO, i2)tC 

t>o/cP#^-C\ !!82<DB^$tLfcSB2cO§P5>*^f'J^tt«f+W^-X s *>^f+^$ 

timmx&frx*hz> 0 fio-c, ^o^F^^^-e^tf^tvaM^iotc^j-t-^ii^M 

^KteBOA— hp2<DfiJ^fltV(p2)^*tb§*^T^ 0 
[0632] (^^l-2)p2i6Sp3©i/7h'^>r/VK-e*)5^#x EI83lC53*-t"«fc5fc, Rp2£> 

VI e leafs(B)[i < iO] 
iot, p2 = root(B)<DSiJSflttt, i0-e9fiSiJ$tt57l»K{J:*3V^fll3^L'C*5*)x 
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^^(t^)III^:A^7^-^hrtOfe^)l|I^:^^/J^ST3^jlb, root(ST3)^iO<DiHC 
J:^.^|iE^i:^^) 0 k =height(ST3)£g< 0 §EfiE,kO"> i'M(0, iO)(D/l^— h/^rtPathS 
T3(0, i0)^^m^)o 

rtPathST3(0, iO) = [(0, r(0)), (f, r(j')), O' + l, Kj' + D), (k, Kk))] 
authPathST3(0, iO)<Dg|fT\ l^A-^j'J^/h^y— KO&tfS: 

[(0, s(0)), 0"-i, sO'-D)] 

b&< 0 #jl e [0..j"-l]^LT, V(jl, Kjl))^immedData(iO)fc£V^lateData(iO, i 

[0634] authPathST3(0, iO)<D^g*'3:«fc"^ authPathST3(0, iO)<Dl"</>jl<DW££p2 = (jl. s( 

rtPathST3(0, iO))OV-</Hl + 1<D^^ P 3 = 0*1+1, Hjl+l))(Dy4b'f-^^ 

[0635] (4§^2- l)p2^p3<D^h-^^/VRT*fc5£#, 084^^5^, p2C0f ij^fg 
V(p2)« > il ^ i2^i2^*5V^T, ^^Sif-et^iSMffi^^— ^lateDataOO, i2)fd-a 
**b£ 0 fciffckff , 7(0, il)^^t-^77^KC>^^Hliff|I0JMS^^ 
o/c0#^T\ 084<DB^$^SB3(Dla3^7|cO#J^fi:{iti-#-^tg-efc«9ti-#$^ 

— ^ &U2BO/W— hp20#J S !6V(p2)*S^**LSd^-C*>5o 
[0636] (»-a-2-2)p2*s p 30U7h'^^K-C*>5i:# x ,fc5fc, /— Kp2<£> 

plSr/i'— hi:i-^)§f*5>^B(cov^T, 

Vi e leafs(B)[i < iO] 
■Cfct), ^oTiOT^S"J$fbS7!>VK<^M^"t#^, leafs(B)OfiJ^ffi{«^LTV^o 
£oT. p2 = root(B)(DfiJ^j|t« N i0^^iJ$ix5"77^K"iI^V>T"Sfe*€LT*3"9, t£ 
o-Cp2{iiOB#^J^ joV ^^aSflfe^LTV ^iOO^fiE/^y— K^^^^'g-ittSd^ 
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[0637] (3)mWE'<X(D7£mRX?m8 (2)^b. #jl e [0..j']^*J-LT, V(jl, 0D)SrWT© 

[0638] £i\ V(jl, Kjl^fiSSfiEBJft^^tLTV^y-KXO, i0)<D^J^ig^5 o 
[0639] jfcKl, jl €= [0..j'-l]^LT, V(jl, Kjl)) ^ff ^$*Wc^K/£U V(jl+1, Kjl+D) 

Sr^TOJ:5K:fHf-r5 0 Kjl) < sOD^^tfi, 

V(jl+1, Kjl+D) = h(V(jl, r(jl)) II V(jl, s(jl))) 
£U s(jl) < rOD <£>£#i± x 

voi+i, Kjl+D) = h(v(ji, sOD) II vG'i, Kjl))) 
[0640] «§§g , **ag£fflv ^X^>bm&&&W1r^^>hMJ*mWisx J r 
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mmmmwft m mm i <D%t^m urn m&mm^^mm izmmi-z^mmm 

[2] mmMwwi¥j&*7-yzfiz.3o\s^x. mmmmmm^ lutein <djii^^7m#/£ 

mmwmtm~(Di'Em.2fmz£<9^ m2<D^^mmmm^m-r^>tth^, tarn 
m2(D^^^mmm^M^^Km^mxt^m^z^n^m2(D^mm\im 

mmmmmm^K mz-femmmmmTmzmm^&mmwwitj&^y^x 
mmmmmm^m^miRx^m2(D^^mmmm<Dmmmmw^m^mm^. 
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itutsiiEW^a^iiiifais^ 
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^iw.^mWiir^-t^w^b^m^m8Xii9tm(D^>hm^mm^m^ 



WO 2006/019143 



126 



PCT/JP2005/0 1 5085 



[i3] mm--Mmmmmmrm^ mmmnmmmmz^m. h^^mmm^km 



WO 2006/019143 



PCT/JP2005/015085 



127 



iiillBJiI&il^TM-iW ^ 
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m x$>z>^m mm w&mini-z>m<v^m mm mm^^yt , 
mmm^^y^xm^ritz^mmmm^^n^my-v^mmmt, mm 
(D&m^m^^x, mmmi^mmm^iE^^m^, mmw,i<Dmmm<Dmm 
m<D^m^.<D^H^M t<Dm& m^mm-r sfg 1 v>mm m^M^yft. 

[i6] mm&mmmm^m^yfUs £<b^, mm^&m^mmmi(D^mm 
m mmtR*Ty-7xmtR£titc$£d£m mm m^mvtcm i©sta^Biaiftgi 

mmmi(Dmmm^^^yy^^^x^ mm^^mmi-t. mmmi<Dmmw<7) 

mmmm^(Dmm^mMi)mmmi<DmM^h0mm^mxh^t^^ 

mm%L^j>m 0 

[n] mmmmmwfrK mm— femmmmmTmmm^mmmwftf&^y^ 
^^xi^m^ntcmmm^^mmmm^mmm^mmi-^x^mmm^m 

mmmm^M^mmw.w^^^^^mmw^mmMMW^nWi^mm^.^.^w. 
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[20] 



mfc&wi<D&&m mm m&miR-t z>m2(D^m mm mm^^yzft , 
^xm^titc^^mmmmRmm^mmmm^mtmmm^mm^hMm 



mmm 



w&mm£mm-rz> / m2<Dmmwm. 

mmmm^mmxi^mmm^mm^b^2(DmmmM^^titcb^^n. m 
m^mmfc. m^2(Dmmm&^vxftf&£thtzm2<Dmwmizttirz>%£i£ 

iRxfm2(Dmmmm^n^mm^>k(D^HmM(Dm^m^m^i-^mm 



wtmt zmwt(D^m mm mRvtm m^^rn mm m<D% 



BU pBH: 



ft , mmm i©m sebj? mm^^y^xm^titz^^m mm 
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mmm^mn^^^b^mmbir^m^m23mm(D-f^h\mmiEmmm: 0 
xtzum^ m2<D^.^m^Mm\m^Mm^m<o^x, mmtwmbm— <d\^ 
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[28] tuts— ^to»t# ^Bfjfajiii^A^7t^(Dttjse/v-MiS^mT-w^*i-5 

Ho 

[30] Bufe^Uffl^S/ei^ism^fiE^^^^^^^ttc, 
W^^T^n^tfifeJiB^^Tfc^y-^^ff^^^-r^i, 
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[34] Mte— j£^mmmifeTmzmmmifcMfo*<Dm&i'~- hm&m*&)i^£m-t% 
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mm-^mmmmmrm^mm^^mmmm<¥m^xi^^tz.mmmm 
(D^^mmmm^m^mmir^x^mmmiikMm^hWLnu &^mmmw 

m ^M%L(D^Mm mm m<n ^ , tui i cora # ^*h-&^^<d jg i <» 
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v^r, Mt£micommw(DiEmtti$:%k&^ mmmi(Dmmm(omm^(D^m 
Mbmmmi<v^mmmwm^&\z.£<>xm^titc^mmmw(D%£^m 

mmmi(Dmmm(D^wm^m^m^mm^mm-r^^^mm^t 

mmmi <om m m^&mmmmmm ^mm -t^mpf mm m^mm^y^t. 
mmm%im>h. ffmen i <vmm -r z>mm m^m^^t % 

mmmicommm^^^^m^^&^m^y-^t. 
[48] wim^mmmm^m ^m-z, mmmi(o^^mmmmm^mzx.^xm^R 

mmm^mmm^^Wite, mmmwmmm^mzmm^nmwgtttef 
M^mtimi^mm^hmmmmx^^b^irKmmnm^mm^^^ 
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mikMifo^femm ^t, m mm i <Dmm mx <9 mm mm & m<D 

(ommm<Dmmmm^(Dmm^Hmmtmtm2<D^mmmmm^^x 
^xm^ntz^^mmmm(D^^mM(D^HmM(Dmmm^mm-r^m2<D 

[50] BUfE^^^gii, 
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